Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
75f96b8e by Salvatore Bonaccorso at 2022-09-17T10:34:18+02:00
Track some tensorflow CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -12178,9 +12178,9 @@ CVE-2022-36029
 CVE-2022-36028
        RESERVED
 CVE-2022-36027 (TensorFlow is an open source platform for machine learning. 
When conve ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-36026 (TensorFlow is an open source platform for machine learning. If 
`Quanti ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-36025
        RESERVED
 CVE-2022-36024 (py-cord is a an API wrapper for Discord written in Python. 
Bots creati ...)
@@ -12194,23 +12194,23 @@ CVE-2022-36021
 CVE-2022-36020 (The typo3/html-sanitizer package is an HTML sanitizer, written 
in PHP, ...)
        TODO: check
 CVE-2022-36019 (TensorFlow is an open source platform for machine learning. If 
`FakeQu ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-36018 (TensorFlow is an open source platform for machine learning. If 
`Ragged ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-36017 (TensorFlow is an open source platform for machine learning. If 
`Requan ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-36016 (TensorFlow is an open source platform for machine learning. 
When `tens ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-36015 (TensorFlow is an open source platform for machine learning. 
When `Rang ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-36014 (TensorFlow is an open source platform for machine learning. 
When `mlir ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-36013 (TensorFlow is an open source platform for machine learning. 
When `mlir ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-36012 (TensorFlow is an open source platform for machine learning. 
When `mlir ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-36011 (TensorFlow is an open source platform for machine learning. 
When `mlir ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-36010 (This library allows strings to be parsed as functions and 
stored as a  ...)
        NOT-FOR-US: oxyno-zeta
 CVE-2022-36009 (gomatrixserverlib is a Go library for matrix protocol 
federation. Dend ...)
@@ -12222,59 +12222,59 @@ CVE-2022-36007 (Venice is a Clojure inspired 
sandboxed Lisp dialect with excelle
 CVE-2022-36006 (Arvados is an open source platform for managing, processing, 
and shari ...)
        NOT-FOR-US: Arvados
 CVE-2022-36005 (TensorFlow is an open source platform for machine learning. 
When `tf.q ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-36004 (TensorFlow is an open source platform for machine learning. 
When `tf.r ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-36003 (TensorFlow is an open source platform for machine learning. 
When `Rand ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-36002 (TensorFlow is an open source platform for machine learning. 
When `Unba ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-36001 (TensorFlow is an open source platform for machine learning. 
When `Draw ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-36000 (TensorFlow is an open source platform for machine learning. 
When `mlir ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35999 (TensorFlow is an open source platform for machine learning. 
When `Conv ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35998 (TensorFlow is an open source platform for machine learning. If 
`EmptyT ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35997 (TensorFlow is an open source platform for machine learning. If 
`tf.spa ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35996 (TensorFlow is an open source platform for machine learning. If 
`Conv2D ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35995 (TensorFlow is an open source platform for machine learning. 
When `Audi ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35994 (TensorFlow is an open source platform for machine learning. 
When `Coll ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35993 (TensorFlow is an open source platform for machine learning. 
When `SetS ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35992 (TensorFlow is an open source platform for machine learning. 
When `Tens ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35991 (TensorFlow is an open source platform for machine learning. 
When `Tens ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35990 (TensorFlow is an open source platform for machine learning. 
When `tf.q ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35989 (TensorFlow is an open source platform for machine learning. 
When `MaxP ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35988 (TensorFlow is an open source platform for machine learning. 
When `tf.l ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35987 (TensorFlow is an open source platform for machine learning. 
`DenseBinc ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35986 (TensorFlow is an open source platform for machine learning. If 
`Ragged ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35985 (TensorFlow is an open source platform for machine learning. If 
`LRNGra ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35984 (TensorFlow is an open source platform for machine learning. 
`Parameter ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35983 (TensorFlow is an open source platform for machine learning. If 
`Save`  ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35982 (TensorFlow is an open source platform for machine learning. If 
`Sparse ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35981 (TensorFlow is an open source platform for machine learning. 
`Fractiona ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35980 (OpenSearch Security is a plugin for OpenSearch that offers 
encryption, ...)
        NOT-FOR-US: OpenSearch Security plugin for OpenSearch
 CVE-2022-35979 (TensorFlow is an open source platform for machine learning. If 
`Quanti ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35978 (Minetest is a free open-source voxel game engine with easy 
modding and ...)
        - minetest 5.5.0+dfsg+~1.9.0mt4+dfsg-2 (bug #1017548)
        [bullseye] - minetest <no-dsa> (Minor issue)
@@ -12288,37 +12288,37 @@ CVE-2022-35976 (The GitOps Tools Extension for VSCode 
relies on kubeconfigs in o
 CVE-2022-35975 (The GitOps Tools Extension for VSCode can make it easier to 
manage Flu ...)
        NOT-FOR-US: GitOps Tools Extension for VSCode
 CVE-2022-35974 (TensorFlow is an open source platform for machine learning. If 
`Quanti ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35973 (TensorFlow is an open source platform for machine learning. If 
`Quanti ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35972 (TensorFlow is an open source platform for machine learning. If 
`Quanti ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35971 (TensorFlow is an open source platform for machine learning. If 
`FakeQu ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35970 (TensorFlow is an open source platform for machine learning. If 
`Quanti ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35969 (TensorFlow is an open source platform for machine learning. 
The implem ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35968 (TensorFlow is an open source platform for machine learning. 
The implem ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35967 (TensorFlow is an open source platform for machine learning. If 
`Quanti ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35966 (TensorFlow is an open source platform for machine learning. If 
`Quanti ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35965 (TensorFlow is an open source platform for machine learning. If 
`LowerB ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35964 (TensorFlow is an open source platform for machine learning. 
The implem ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35963 (TensorFlow is an open source platform for machine learning. 
The implem ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35962 (Zulip is an open source team chat and Zulip Mobile is an app 
for iOS a ...)
        NOT-FOR-US: Zulip
 CVE-2022-35961 (OpenZeppelin Contracts is a library for secure smart contract 
developm ...)
        NOT-FOR-US: OpenZeppelin
 CVE-2022-35960 (TensorFlow is an open source platform for machine learning. In 
`core/k ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35959 (TensorFlow is an open source platform for machine learning. 
The implem ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35958
        REJECTED
 CVE-2022-35957
@@ -12332,7 +12332,7 @@ CVE-2022-35954 (The GitHub Actions ToolKit provides a 
set of packages to make cr
 CVE-2022-35953 (BookWyrm is a social network for tracking your reading, 
talking about  ...)
        NOT-FOR-US: BookWyrm
 CVE-2022-35952 (TensorFlow is an open source platform for machine learning. 
The `Unbat ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35951
        RESERVED
 CVE-2022-35950
@@ -12361,21 +12361,21 @@ CVE-2022-35943 (Shield is an authentication and 
authorization framework for Code
 CVE-2022-35942 (Improper input validation on the `contains` LoopBack filter 
may allow  ...)
        NOT-FOR-US: PostgreSQL connector for LoopBack
 CVE-2022-35941 (TensorFlow is an open source platform for machine learning. 
The `AvgPo ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35940 (TensorFlow is an open source platform for machine learning. 
The `Ragge ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35939 (TensorFlow is an open source platform for machine learning. 
The `Scatt ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35938 (TensorFlow is an open source platform for machine learning. 
The `Gathe ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35937 (TensorFlow is an open source platform for machine learning. 
The `Gathe ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35936 (Ethermint is an Ethereum library. In Ethermint running 
versions before ...)
        NOT-FOR-US: Ethermint
 CVE-2022-35935 (TensorFlow is an open source platform for machine learning. 
The implem ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35934 (TensorFlow is an open source platform for machine learning. 
The implem ...)
-       TODO: check
+       - tensorflow <itp> (bug #804612)
 CVE-2022-35933 (This package is a PrestaShop module that allows users to post 
reviews  ...)
        NOT-FOR-US: PrestaShop
 CVE-2022-35932 (Nextcloud Talk is a video and audio conferencing app for 
Nextcloud. Pr ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/75f96b8ef8b85daa87618fd9a66e04c67d4ee5ce

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/75f96b8ef8b85daa87618fd9a66e04c67d4ee5ce
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to