Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
37341d97 by Salvatore Bonaccorso at 2022-03-23T21:46:05+01:00
Process NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7858,7 +7858,7 @@ CVE-2022-24776
CVE-2022-24775 (guzzlehttp/psr7 is a PSR-7 HTTP message library. Versions
prior to 1.8 ...)
TODO: check
CVE-2022-24774 (CycloneDX BOM Repository Server is a bill of materials (BOM)
repositor ...)
- TODO: check
+ NOT-FOR-US: CycloneDX BOM Repository Server
CVE-2022-24773 (Forge (also called `node-forge`) is a native implementation of
Transpo ...)
- node-node-forge 1.3.0~dfsg-1
[bullseye] - node-node-forge <no-dsa> (Minor issue)
@@ -9899,7 +9899,7 @@ CVE-2022-0417 (Heap-based Buffer Overflow GitHub
repository vim/vim prior to 8.2
CVE-2022-0416
RESERVED
CVE-2022-0415 (Remote Command Execution in uploading repository file in GitHub
reposi ...)
- TODO: check
+ NOT-FOR-US: Go Git Service
CVE-2022-24130 (xterm through Patch 370, when Sixel support is enabled, allows
attacke ...)
{DLA-2913-1}
- xterm 370-2 (bug #1004689)
@@ -10349,7 +10349,7 @@ CVE-2022-24005
CVE-2022-0387 (Cross-site Scripting (XSS) - Stored in Packagist
remdex/livehelperchat ...)
NOT-FOR-US: livehelperchat
CVE-2022-0386 (A post-auth SQL injection vulnerability in the Mail Manager
potentiall ...)
- TODO: check
+ NOT-FOR-US: Sophos Mail Manager
CVE-2022-0385 (The Crazy Bone WordPress plugin through 0.6.0 does not sanitise
and es ...)
NOT-FOR-US: WordPress plugin
CVE-2022-0384 (The Video Conferencing with Zoom WordPress plugin before 3.8.17
does n ...)
@@ -12878,7 +12878,7 @@ CVE-2021-46392
CVE-2021-46391
RESERVED
CVE-2021-46390 (An access control issue in the authentication module of
Lexar_F35 v1.0 ...)
- TODO: check
+ NOT-FOR-US: Lexar
CVE-2021-46389 (IIPImage High Resolution Streaming Image Server prior to
commit 882925 ...)
NOT-FOR-US: IIPImage High Resolution Streaming Image Server
CVE-2021-46388
@@ -13342,7 +13342,7 @@ CVE-2022-23244
CVE-2022-23243
RESERVED
CVE-2022-23242 (TeamViewer Linux versions before 15.28 do not properly execute
a delet ...)
- TODO: check
+ NOT-FOR-US: TeamViewer
CVE-2022-23241
RESERVED
CVE-2022-23240
@@ -15553,87 +15553,87 @@ CVE-2022-22673
CVE-2022-22672
RESERVED
CVE-2022-22671 (An authentication issue was addressed with improved state
management. ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22670 (An access issue was addressed with improved access
restrictions. This ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22669 (A use after free issue was addressed with improved memory
management. ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22668
RESERVED
CVE-2022-22667 (A use after free issue was addressed with improved memory
management. ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22666 (A memory corruption issue was addressed with improved
validation. This ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22665 (A logic issue was addressed with improved validation. This
issue is fi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22664 (An out-of-bounds read was addressed with improved bounds
checking. Thi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22663
RESERVED
CVE-2022-22662
RESERVED
CVE-2022-22661 (A type confusion issue was addressed with improved state
handling. Thi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22660 (This issue was addressed with a new entitlement. This issue is
fixed i ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22659 (A logic issue was addressed with improved state management.
This issue ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22658
RESERVED
CVE-2022-22657 (A memory initialization issue was addressed with improved
memory handl ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22656 (An authentication issue was addressed with improved state
management. ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22655
RESERVED
CVE-2022-22654 (A user interface issue was addressed. This issue is fixed in
watchOS 8 ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22653 (A logic issue was addressed with improved restrictions. This
issue is ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22652 (The GSMA authentication panel could be presented on the lock
screen. T ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22651 (An out-of-bounds write issue was addressed with improved
bounds checki ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22650 (This issue was addressed with improved checks. This issue is
fixed in ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22649
RESERVED
CVE-2022-22648 (This issue was addressed with improved checks. This issue is
fixed in ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22647 (This issue was addressed with improved checks. This issue is
fixed in ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22646
RESERVED
CVE-2022-22645
RESERVED
CVE-2022-22644 (A privacy issue existed in the handling of Contact cards. This
was add ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22643 (This issue was addressed with improved checks. This issue is
fixed in ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22642 (This issue was addressed with improved checks. This issue is
fixed in ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22641 (A use after free issue was addressed with improved memory
management. ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22640 (A memory corruption issue was addressed with improved
validation. This ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22639 (A logic issue was addressed with improved state management.
This issue ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22638 (A null pointer dereference was addressed with improved
validation. Thi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22637
RESERVED
CVE-2022-22636 (An out-of-bounds write issue was addressed with improved
bounds checki ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22635 (An out-of-bounds write issue was addressed with improved
bounds checki ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22634 (A buffer overflow was addressed with improved bounds checking.
This is ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22633 (A memory corruption issue was addressed with improved state
management ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22632 (A logic issue was addressed with improved state management.
This issue ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22631 (An out-of-bounds write issue was addressed with improved
bounds checki ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22630
RESERVED
CVE-2022-22629
@@ -15641,19 +15641,19 @@ CVE-2022-22629
CVE-2022-22628
RESERVED
CVE-2022-22627 (An out-of-bounds read was addressed with improved bounds
checking. Thi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22626 (An out-of-bounds read was addressed with improved bounds
checking. Thi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22625 (An out-of-bounds read was addressed with improved input
validation. Th ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22624
RESERVED
CVE-2022-22623 (Multiple issues were addressed by updating to curl version
7.79.1. Thi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22622 (This issue was addressed with improved checks. This issue is
fixed in ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22621 (This issue was addressed with improved checks. This issue is
fixed in ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22620 (A use after free issue was addressed with improved memory
management. ...)
{DSA-5084-1 DSA-5083-1}
- webkit2gtk 2.34.6-1
@@ -15663,51 +15663,51 @@ CVE-2022-22620 (A use after free issue was addressed
with improved memory manage
CVE-2022-22619
RESERVED
CVE-2022-22618 (This issue was addressed with improved checks. This issue is
fixed in ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22617 (A logic issue was addressed with improved state management.
This issue ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22616
RESERVED
CVE-2022-22615 (A use after free issue was addressed with improved memory
management. ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22614 (A use after free issue was addressed with improved memory
management. ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22613 (An out-of-bounds write issue was addressed with improved
bounds checki ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22612 (A memory consumption issue was addressed with improved memory
handling ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22611 (An out-of-bounds read was addressed with improved input
validation. Th ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22610
RESERVED
CVE-2022-22609 (The issue was addressed with additional permissions checks.
This issue ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22608 (An out-of-bounds read was addressed with improved bounds
checking. Thi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22607 (An out-of-bounds read was addressed with improved bounds
checking. Thi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22606 (An out-of-bounds read was addressed with improved bounds
checking. Thi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22605 (An out-of-bounds read was addressed with improved bounds
checking. Thi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22604 (An out-of-bounds read was addressed with improved bounds
checking. Thi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22603 (An out-of-bounds read was addressed with improved bounds
checking. Thi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22602 (An out-of-bounds read was addressed with improved bounds
checking. Thi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22601 (An out-of-bounds read was addressed with improved bounds
checking. Thi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22600 (The issue was addressed with improved permissions logic. This
issue is ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22599 (Description: A permissions issue was addressed with improved
validatio ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22598 (An issue with app access to camera metadata was addressed with
improve ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22597 (A memory corruption issue was addressed with improved
validation. This ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22596 (A memory corruption issue was addressed with improved
validation. This ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22595
RESERVED
CVE-2022-22594 (A cross-origin issue in the IndexDB API was addressed with
improved in ...)
@@ -15717,9 +15717,9 @@ CVE-2022-22594 (A cross-origin issue in the IndexDB API
was addressed with impro
- wpewebkit 2.34.4-1
NOTE: https://webkitgtk.org/security/WSA-2022-0001.html
CVE-2022-22593 (A buffer overflow issue was addressed with improved memory
handling. T ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22591 (A memory corruption issue was addressed with improved memory
handling. ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22589 (A validation issue was addressed with improved input
sanitization. Thi ...)
{DSA-5084-1 DSA-5083-1}
- webkit2gtk 2.34.5-1
@@ -15727,17 +15727,17 @@ CVE-2022-22589 (A validation issue was addressed with
improved input sanitizatio
- wpewebkit 2.34.5-1
NOTE: https://webkitgtk.org/security/WSA-2022-0002.html
CVE-2022-22588 (A resource exhaustion issue was addressed with improved input
validati ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22587 (A memory corruption issue was addressed with improved input
validation ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22586 (An out-of-bounds write issue was addressed with improved
bounds checki ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22585 (An issue existed within the path validation logic for
symlinks. This i ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22584 (A memory corruption issue was addressed with improved
validation. This ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22583 (A permissions issue was addressed with improved validation.
This issue ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22582
RESERVED
CVE-2022-22581
@@ -15745,9 +15745,9 @@ CVE-2022-22581
CVE-2022-22580
RESERVED
CVE-2022-22579 (An information disclosure issue was addressed with improved
state mana ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22578 (A logic issue was addressed with improved validation. This
issue is fi ...)
- TODO: check
+ NOT-FOR-US: Apple
CVE-2022-22577
RESERVED
CVE-2022-22576
@@ -16647,7 +16647,7 @@ CVE-2021-46066
CVE-2021-46065 (A Cross-site scripting (XSS) vulnerability in Secondary Email
Field in ...)
NOT-FOR-US: Zoho ManageEngine
CVE-2021-46064 (IrfanView 4.59 is vulnerable to buffer overflow via the
function at ad ...)
- TODO: check
+ NOT-FOR-US: IrfanView
CVE-2021-46063 (MCMS v5.2.5 was discovered to contain a Server Side Template
Injection ...)
NOT-FOR-US: MCMS
CVE-2021-46062 (MCMS v5.2.5 was discovered to contain an arbitrary file
deletion vulne ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/37341d97af3540a7d0a1e069756db3e12cb37724
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/37341d97af3540a7d0a1e069756db3e12cb37724
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
