Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ada94844 by security tracker role at 2022-04-01T20:10:23+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,43 @@
+CVE-2022-28341
+ RESERVED
+CVE-2022-28340
+ RESERVED
+CVE-2022-28339
+ RESERVED
+CVE-2022-28338
+ RESERVED
+CVE-2022-28337
+ RESERVED
+CVE-2022-28336
+ RESERVED
+CVE-2022-28335
+ RESERVED
+CVE-2022-28334
+ RESERVED
+CVE-2022-28333
+ RESERVED
+CVE-2022-28332
+ RESERVED
+CVE-2022-28331
+ RESERVED
+CVE-2022-28330
+ RESERVED
+CVE-2022-28329
+ RESERVED
+CVE-2022-28328
+ RESERVED
+CVE-2022-1206
+ RESERVED
+CVE-2022-1205
+ RESERVED
+CVE-2022-1204
+ RESERVED
+CVE-2022-1203
+ RESERVED
+CVE-2022-1202
+ RESERVED
+CVE-2022-1201
+ RESERVED
CVE-2022-28327
RESERVED
CVE-2022-28326
@@ -1464,6 +1504,7 @@ CVE-2022-1061 (Heap Buffer Overflow in parseDragons in
GitHub repository radareo
NOTE: https://huntr.dev/bounties/a7546dae-01c5-4fb0-8a8e-c04ea4e9bac7
NOTE:
https://github.com/radareorg/radare2/commit/d4ce40b516ffd70cf2e9e36832d8de139117d522
CVE-2018-25032 (zlib before 1.2.12 allows memory corruption when deflating
(i.e., when ...)
+ {DSA-5111-1}
- zlib 1:1.2.11.dfsg-4 (bug #1008265)
- libz-mingw-w64 1.2.11+dfsg-5
[bullseye] - libz-mingw-w64 <no-dsa> (Minor issue)
@@ -4678,8 +4719,8 @@ CVE-2022-26564
RESERVED
CVE-2022-26563
RESERVED
-CVE-2022-26562
- RESERVED
+CVE-2022-26562 (An issue in provider/libserver/ECKrbAuth.cpp of Kopano-Core
v11.0.2.51 ...)
+ TODO: check
CVE-2022-26561
RESERVED
CVE-2022-26560
@@ -6511,8 +6552,8 @@ CVE-2022-24909
RESERVED
CVE-2022-24441
RESERVED
-CVE-2022-24440
- RESERVED
+CVE-2022-24440 (The package cocoapods-downloader before 1.6.0, from 1.6.2 and
before 1 ...)
+ TODO: check
CVE-2022-24439
RESERVED
CVE-2022-24438
@@ -6577,8 +6618,8 @@ CVE-2022-21802
RESERVED
CVE-2022-21797
RESERVED
-CVE-2022-21235
- RESERVED
+CVE-2022-21235 (The package github.com/masterminds/vcs before 1.13.3 are
vulnerable to ...)
+ TODO: check
CVE-2022-21232
RESERVED
CVE-2022-21231
@@ -6587,8 +6628,8 @@ CVE-2022-21230
RESERVED
CVE-2022-21227
RESERVED
-CVE-2022-21223
- RESERVED
+CVE-2022-21223 (The package cocoapods-downloader before 1.6.2 are vulnerable
to Comman ...)
+ TODO: check
CVE-2022-21222
RESERVED
CVE-2022-21221 (The package github.com/valyala/fasthttp before 1.34.0 are
vulnerable t ...)
@@ -11509,8 +11550,8 @@ CVE-2022-24183
RESERVED
CVE-2022-24182
RESERVED
-CVE-2022-24181
- RESERVED
+CVE-2022-24181 (Cross-site scripting (XSS) via Host Header injection in PKP
Open Journ ...)
+ TODO: check
CVE-2022-24180
RESERVED
CVE-2022-24179
@@ -12971,8 +13012,8 @@ CVE-2021-46445 (H.H.G Multistore v5.1.0 and below was
discovered to contain a SQ
NOT-FOR-US: H.H.G Multistore
CVE-2021-46444 (H.H.G Multistore v5.1.0 and below was discovered to contain a
SQL inje ...)
NOT-FOR-US: H.H.G Multistore
-CVE-2021-46443
- RESERVED
+CVE-2021-46443 (Spoofer 1.4.6 suffers from unquoted service paths
vulnerability. An at ...)
+ TODO: check
CVE-2021-46442
RESERVED
CVE-2021-46441
@@ -18058,8 +18099,8 @@ CVE-2022-22406
RESERVED
CVE-2022-22405
RESERVED
-CVE-2022-22404
- RESERVED
+CVE-2022-22404 (IBM App Connect Enterprise Certified Container Dashboard UI
(IBM App C ...)
+ TODO: check
CVE-2022-22403
RESERVED
CVE-2022-22402
@@ -18202,18 +18243,18 @@ CVE-2022-22334
RESERVED
CVE-2022-22333 (IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and
IBM Sterli ...)
NOT-FOR-US: IBM
-CVE-2022-22332
- RESERVED
-CVE-2022-22331
- RESERVED
+CVE-2022-22332 (IBM Sterling Partner Engagement Manager 6.2.0 could allow an
attacker ...)
+ TODO: check
+CVE-2022-22331 (IBM SterlingPartner Engagement Manager 6.2.0 could allow a
remote auth ...)
+ TODO: check
CVE-2022-22330
RESERVED
CVE-2022-22329
RESERVED
-CVE-2022-22328
- RESERVED
-CVE-2022-22327
- RESERVED
+CVE-2022-22328 (IBM SterlingPartner Engagement Manager 6.2.0 could allow a
malicious u ...)
+ TODO: check
+CVE-2022-22327 (IBM UrbanCode Deploy (UCD) 7.0.5, 7.1.0, 7.1.1, and 7.1.2 uses
weaker ...)
+ TODO: check
CVE-2022-22326
RESERVED
CVE-2022-22325
@@ -25199,8 +25240,8 @@ CVE-2021-44137
RESERVED
CVE-2021-44136
RESERVED
-CVE-2021-44135
- RESERVED
+CVE-2021-44135 (pagekit all versions, as of 15-10-2021, is vulnerable to SQL
Injection ...)
+ TODO: check
CVE-2021-44134
RESERVED
CVE-2021-44133
@@ -47093,10 +47134,10 @@ CVE-2021-36778
RESERVED
CVE-2021-36777 (A Reliance on Untrusted Inputs in a Security Decision
vulnerability in ...)
NOT-FOR-US: OpenSuSE infrastructure
-CVE-2021-36776
- RESERVED
-CVE-2021-36775
- RESERVED
+CVE-2021-36776 (A Improper Access Control vulnerability in SUSE Rancher allows
remote ...)
+ TODO: check
+CVE-2021-36775 (a Improper Access Control vulnerability in SUSE Rancher allows
users t ...)
+ TODO: check
CVE-2021-3653 (A flaw was found in the KVM's AMD code for supporting SVM
nested virtu ...)
{DSA-4978-1 DLA-2843-1 DLA-2785-1}
- linux 5.14.6-1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ada94844529e6d13f5a449c05dec6ce95e719fa9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ada94844529e6d13f5a449c05dec6ce95e719fa9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
