Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6b62a408 by Moritz Mühlenhoff at 2022-12-28T17:41:58+01:00
bugnums
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4631,7 +4631,7 @@ CVE-2022-4399 (A vulnerability was found in
TicklishHoneyBee nodau. It has been
NOTE: https://github.com/TicklishHoneyBee/nodau/pull/26
NOTE: Negligible security impact
CVE-2022-4398 (Integer Overflow or Wraparound in GitHub repository
radareorg/radare2 ...)
- - radare2 <unfixed>
+ - radare2 <unfixed> (bug #1027144)
NOTE: https://huntr.dev/bounties/c6f8d3ef-5420-4eba-9a5f-aba5e2b5fea2
NOTE:
https://github.com/radareorg/radare2/commit/b53a1583d05c3a5bfe5fa60da133fe59dfbb02b8
CVE-2022-4397 (A vulnerability was found in morontt zend-blog-number-2. It has
been c ...)
@@ -7046,7 +7046,7 @@ CVE-2022-46177
CVE-2022-46176
RESERVED
CVE-2022-46175 (JSON5 is an extension to the popular JSON file format that
aims to be ...)
- - node-json5 <unfixed>
+ - node-json5 <unfixed> (bug #1027145)
[bullseye] - node-json5 <no-dsa> (Minor issue)
NOTE:
https://github.com/json5/json5/security/advisories/GHSA-9c47-m6qq-7p4h
NOTE: https://github.com/json5/json5/issues/199
@@ -16799,37 +16799,37 @@ CVE-2022-43604
CVE-2022-43603 (A denial of service vulnerability exists in the
ZfileOutput::close() f ...)
TODO: check
CVE-2022-43602 (Multiple code execution vulnerabilities exist in the
IFFOutput::close( ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1656
CVE-2022-43601 (Multiple code execution vulnerabilities exist in the
IFFOutput::close( ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1656
CVE-2022-43600 (Multiple code execution vulnerabilities exist in the
IFFOutput::close( ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1656
CVE-2022-43599 (Multiple code execution vulnerabilities exist in the
IFFOutput::close( ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1656
CVE-2022-43598 (Multiple memory corruption vulnerabilities exist in the
IFFOutput alig ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1655
CVE-2022-43597 (Multiple memory corruption vulnerabilities exist in the
IFFOutput alig ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1655
CVE-2022-43596 (An information disclosure vulnerability exists in the
IFFOutput channe ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1654
CVE-2022-43595 (Multiple denial of service vulnerabilities exist in the image
output c ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1653
CVE-2022-43594 (Multiple denial of service vulnerabilities exist in the image
output c ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1653
CVE-2022-43593 (A denial of service vulnerability exists in the
DPXOutput::close() fun ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1652
CVE-2022-43592 (An information disclosure vulnerability exists in the
DPXOutput::close ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1651
CVE-2022-43591
RESERVED
@@ -19975,14 +19975,14 @@ CVE-2022-41999 (A denial of service vulnerability
exists in the DDS native tile
CVE-2022-41991
RESERVED
CVE-2022-41988 (An information disclosure vulnerability exists in the
OpenImageIO::dec ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1643
NOTE:
https://github.com/OpenImageIO/oiio/commit/e9103925bb2aeed36b01b3805f36959f5d1a2e18#diff-8496b368a265f99b41e3c06bf99a5ea82d4f40fff1919ee79caa26ae033b3a06R118
CVE-2022-41838 (A code execution vulnerability exists in the DDS scanline
parsing func ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1634
CVE-2022-41837 (An out-of-bounds write vulnerability exists in the
OpenImageIO::add_ex ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1636
CVE-2022-41632
RESERVED
@@ -21268,22 +21268,22 @@ CVE-2022-42003 (In FasterXML jackson-databind before
2.14.0-rc1, resource exhaus
CVE-2022-42002 (SonicJS through 0.6.0 allows file overwrite. It has the
following muta ...)
NOT-FOR-US: SonicJS
CVE-2022-41981 (A stack-based buffer overflow vulnerability exists in the TGA
file for ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1628
CVE-2022-41977 (An out of bounds read vulnerability exists in the way
OpenImageIO vers ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1627
CVE-2022-41794 (A heap based buffer overflow vulnerability exists in the PSD
thumbnail ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1626
CVE-2022-41684 (A heap out of bounds read vulnerability exists in the
OpenImageIO mast ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1632
CVE-2022-41649 (A heap out of bounds read vulnerability exists in the handling
of IPTC ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1631
CVE-2022-41639 (A heap based buffer overflow vulnerability exists in tile
decoding cod ...)
- - openimageio <unfixed>
+ - openimageio <unfixed> (bug #1027143)
NOTE:
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1633
CVE-2022-38143 (A heap out-of-bounds write vulnerability exists in the way
OpenImageIO ...)
- openimageio <unfixed>
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6b62a408383037e05a402a86d40ec03f1adc2da3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6b62a408383037e05a402a86d40ec03f1adc2da3
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
