Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7ea55732 by Moritz Muehlenhoff at 2022-05-09T22:35:56+02:00
buster/bullseye triage
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -8404,6 +8404,8 @@ CVE-2022-27471
RESERVED
CVE-2022-27470 (SDL_ttf v2.0.18 and below was discovered to contain an
arbitrary memor ...)
- libsdl2-ttf 2.0.18+dfsg-3 (bug #1010671)
+ [bullseye] - libsdl2-ttf <no-dsa> (Minor issue)
+ [buster] - libsdl2-ttf <no-dsa> (Minor issue)
NOTE:
https://github.com/libsdl-org/SDL_ttf/commit/db1b41ab8bde6723c24b866e466cad78c2fa0448
NOTE: https://github.com/libsdl-org/SDL_ttf/issues/187
CVE-2022-27469 (Monstaftp v2.10.3 was discovered to allow attackers to execute
Server- ...)
@@ -40283,6 +40285,7 @@ CVE-2021-42219 (Go-Ethereum v1.10.9 was discovered to
contain an issue which all
- golang-github-go-ethereum <itp> (bug #890541)
CVE-2021-42218 (OMPL v1.5.2 contains a memory leak in VFRRT.cpp ...)
- ompl <unfixed>
+ [bullseye] - ompl <no-dsa> (Minor issue)
NOTE: https://github.com/ompl/ompl/issues/839
NOTE:
https://github.com/ompl/ompl/commit/abb4fadcb4e4fe4c9cf41e5e7706143a66948eb7
CVE-2021-42217
@@ -40951,6 +40954,8 @@ CVE-2021-41960
RESERVED
CVE-2021-41959 (JerryScript Git version 14ff5bf does not sufficiently track
and releas ...)
- iotjs <unfixed>
+ [bullseye] - iotjs <no-dsa> (Minor issue)
+ [buster] - iotjs <no-dsa> (Minor issue)
NOTE: https://github.com/jerryscript-project/jerryscript/issues/4781
NOTE: https://github.com/jerryscript-project/jerryscript/pull/4166
NOTE: https://github.com/jerryscript-project/jerryscript/pull/4787
@@ -49749,11 +49754,11 @@ CVE-2021-38427 (RTI Connext DDS Professional and
Connext DDS Secure Versions 4.2
CVE-2021-38426 (FATEK Automation WinProladder versions 3.30 and prior lacks
proper val ...)
NOT-FOR-US: FATEK Automation
CVE-2021-38425 (eProsima Fast DDS versions prior to 2.4.0 (#2269) are
susceptible to e ...)
- - fastdds <undetermined>
+ - fastdds <unfixed>
+ [bullseye] - fastdds <no-dsa> (Minor issue)
NOTE: https://github.com/eProsima/Fast-DDS/issues/2267
NOTE: https://github.com/eProsima/Fast-DDS/pull/2269
NOTE: https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02
- TODO: check completeness
CVE-2021-38424 (The tag interface of Delta Electronics DIALink versions
1.2.4.0 and pr ...)
NOT-FOR-US: Delta Electronics DIALink
CVE-2021-38423 (All versions of GurumDDS improperly calculate the size to be
used when ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ea557328d4a2adbbe84e1356afcf0dc1b240585
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ea557328d4a2adbbe84e1356afcf0dc1b240585
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
