Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b9ef7bb0 by Salvatore Bonaccorso at 2022-10-19T21:38:33+02:00
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9615,13 +9615,13 @@ CVE-2022-39421 (Vulnerability in the Oracle VM
VirtualBox product of Oracle Virt
- virtualbox 6.1.40-dfsg-1
NOTE:
https://www.oracle.com/security-alerts/cpuoct2022.html#AppendixOVIR
CVE-2022-39420 (Vulnerability in the Oracle Transportation Management product
of Oracl ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2022-39419 (Vulnerability in the Java VM component of Oracle Database
Server. Supp ...)
TODO: check
CVE-2022-39418
RESERVED
CVE-2022-39417 (Vulnerability in the Oracle Solaris product of Oracle Systems
(compone ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2022-39416
RESERVED
CVE-2022-39415
@@ -9631,30 +9631,30 @@ CVE-2022-39414
CVE-2022-39413
RESERVED
CVE-2022-39412 (Vulnerability in the Oracle Access Manager product of Oracle
Fusion Mi ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2022-39411 (Vulnerability in the Oracle Transportation Management product
of Oracl ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2022-39410 (Vulnerability in the MySQL Server product of Oracle MySQL
(component: ...)
- mysql-8.0 <unfixed>
CVE-2022-39409 (Vulnerability in the Oracle Transportation Management product
of Oracl ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2022-39408 (Vulnerability in the MySQL Server product of Oracle MySQL
(component: ...)
- mysql-8.0 <unfixed>
CVE-2022-39407 (Vulnerability in the PeopleSoft Enterprise PeopleTools product
of Orac ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2022-39406 (Vulnerability in the PeopleSoft Enterprise Common Components
product o ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2022-39405 (Vulnerability in the Oracle Access Manager product of Oracle
Fusion Mi ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2022-39404 (Vulnerability in the MySQL Installer product of Oracle MySQL
(componen ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2022-39403 (Vulnerability in the MySQL Shell product of Oracle MySQL
(component: S ...)
- mysql-8.0 <unfixed>
TODO: check, component "MySQL Shell", unclear if in src:mysql-8.0
CVE-2022-39402 (Vulnerability in the MySQL Shell product of Oracle MySQL
(component: S ...)
- mysql-8.0 <unfixed>
CVE-2022-39401 (Vulnerability in the Oracle Solaris product of Oracle Systems
(compone ...)
- TODO: check
+ NOT-FOR-US: Oracle
CVE-2022-39400 (Vulnerability in the MySQL Server product of Oracle MySQL
(component: ...)
- mysql-8.0 <unfixed>
CVE-2022-39399 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise
Edition ...)
@@ -10539,13 +10539,13 @@ CVE-2022-39060
CVE-2022-39059
RESERVED
CVE-2022-39058 (RAVA certification validation system has a path traversal
vulnerabilit ...)
- TODO: check
+ NOT-FOR-US: RAVA certification validation system
CVE-2022-39057 (RAVA certificate validation system has insufficient filtering
for spec ...)
- TODO: check
+ NOT-FOR-US: RAVA certification validation system
CVE-2022-39056 (RAVA certificate validation system has insufficient validation
for use ...)
- TODO: check
+ NOT-FOR-US: RAVA certification validation system
CVE-2022-39055 (RAVA certificate validation system has inadequate filtering
for URL pa ...)
- TODO: check
+ NOT-FOR-US: RAVA certification validation system
CVE-2022-39054 (Cowell enterprise travel management system has insufficient
filtering ...)
NOT-FOR-US: Cowell enterprise travel management system
CVE-2022-39053 (Heimavista Rpage has insufficient filtering for platform web
URL. An u ...)
@@ -10966,7 +10966,7 @@ CVE-2022-38903
CVE-2022-38902 (A Cross-site scripting (XSS) vulnerability in the Blog module
- add ne ...)
NOT-FOR-US: Liferay
CVE-2022-38901 (A Cross-site scripting (XSS) vulnerability in the Document and
Media m ...)
- TODO: check
+ NOT-FOR-US: Liferay
CVE-2022-38900
RESERVED
CVE-2022-38899
@@ -11510,7 +11510,7 @@ CVE-2020-36602 (There is an out-of-bounds read and
write vulnerability in some h
CVE-2022-38744
RESERVED
CVE-2022-38743 (Rockwell Automation FactoryTalk VantagePoint versions 8.0,
8.10, 8.20, ...)
- TODO: check
+ NOT-FOR-US: Rockwell Automation
CVE-2022-38742 (Rockwell Automation ThinManager ThinServer versions 11.0.0 -
13.0.0 is ...)
NOT-FOR-US: Rockwell Automation
CVE-2022-38741
@@ -17652,9 +17652,9 @@ CVE-2022-2529 (sflow decode package does not employ
sufficient packet sanitisati
CVE-2022-2528 (In affected versions of Octopus Deploy it is possible to upload
a pack ...)
NOT-FOR-US: Octopus Deploy
CVE-2022-36439 (AsusSoftwareManager.exe in ASUS System Control Interface on
ASUS perso ...)
- TODO: check
+ NOT-FOR-US: ASUS
CVE-2022-36438 (AsusSwitch.exe on ASUS personal computers (running Windows)
sets weak ...)
- TODO: check
+ NOT-FOR-US: ASUS
CVE-2022-36437
RESERVED
CVE-2022-36436 (OSU Open Source Lab VNCAuthProxy through 1.1.1 is affected by
an vncap ...)
@@ -26367,13 +26367,13 @@ CVE-2022-33219
CVE-2022-33218
RESERVED
CVE-2022-33217 (Memory corruption in Qualcomm IPC due to buffer copy without
checking ...)
- TODO: check
+ NOT-FOR-US: Qualcomm
CVE-2022-33216
RESERVED
CVE-2022-33215
RESERVED
CVE-2022-33214 (Memory corruption in display due to time-of-check time-of-use
of metad ...)
- TODO: check
+ NOT-FOR-US: Snapdragon
CVE-2022-33213
RESERVED
CVE-2022-33212
@@ -26381,7 +26381,7 @@ CVE-2022-33212
CVE-2022-33211
RESERVED
CVE-2022-33210 (Memory corruption in automotive multimedia due to use of
out-of-range ...)
- TODO: check
+ NOT-FOR-US: Snapdragon
CVE-2022-33146 (Open redirect vulnerability in web2py versions prior to 2.22.5
allows ...)
- web2py <removed>
CVE-2022-32585 (A command execution vulnerability exists in the clish art2
functionali ...)
@@ -32458,7 +32458,7 @@ CVE-2022-31039 (Greenlight is a simple front-end
interface for your BigBlueButto
CVE-2022-31038 (Gogs is an open source self-hosted Git service. In versions of
gogs pr ...)
NOT-FOR-US: Go Git Service
CVE-2022-31037 (OroCommerce is an open-source Business to Business Commerce
applicatio ...)
- TODO: check
+ NOT-FOR-US: OroCommerce
CVE-2022-31036 (Argo CD is a declarative, GitOps continuous delivery tool for
Kubernet ...)
NOT-FOR-US: Argo CD
CVE-2022-31035 (Argo CD is a declarative, GitOps continuous delivery tool for
Kubernet ...)
@@ -48133,7 +48133,7 @@ CVE-2022-25725
CVE-2022-25724
RESERVED
CVE-2022-25723 (Memory corruption in multimedia due to use after free during
callback ...)
- TODO: check
+ NOT-FOR-US: Snapdragon
CVE-2022-25722
RESERVED
CVE-2022-25721
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b9ef7bb069f7eeb14336bd2e6ae2e5c478f44ad9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b9ef7bb069f7eeb14336bd2e6ae2e5c478f44ad9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
