Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
97d2be57 by Salvatore Bonaccorso at 2024-01-12T22:04:59+01:00
Update information on some older upc-ucl issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -156841,37 +156841,37 @@ CVE-2021-43319 (Zoho ManageEngine Network
Configuration Manager before 125488 is
CVE-2021-43318
RESERVED
CVE-2021-43317 (A heap-based buffer overflows was discovered in upx, during
the generi ...)
- - upx-ucl <unfixed> (unimportant)
+ - upx-ucl 4.2.2-1 (unimportant)
NOTE: https://github.com/upx/upx/issues/380
NOTE:
https://github.com/upx/upx/commit/b327645e648d46c8730be80730a171cf74cfe338
NOTE: Crash in CLI tool, no security impact
CVE-2021-43316 (A heap-based buffer overflow was discovered in upx, during the
generic ...)
- - upx-ucl <unfixed> (unimportant)
+ - upx-ucl 4.2.2-1 (unimportant)
NOTE: https://github.com/upx/upx/issues/381
NOTE:
https://github.com/upx/upx/commit/962c35aa08ef3dcee13d3f7ef6e2d845da912f25
NOTE: Crash in CLI tool, no security impact
CVE-2021-43315 (A heap-based buffer overflows was discovered in upx, during
the generi ...)
- - upx-ucl <unfixed> (unimportant)
+ - upx-ucl 4.2.2-1 (unimportant)
NOTE: https://github.com/upx/upx/issues/380
NOTE:
https://github.com/upx/upx/commit/b327645e648d46c8730be80730a171cf74cfe338
NOTE: Crash in CLI tool, no security impact
CVE-2021-43314 (A heap-based buffer overflows was discovered in upx, during
the generi ...)
- - upx-ucl <unfixed> (unimportant)
+ - upx-ucl 4.2.2-1 (unimportant)
NOTE: https://github.com/upx/upx/issues/380
NOTE:
https://github.com/upx/upx/commit/b327645e648d46c8730be80730a171cf74cfe338
NOTE: Crash in CLI tool, no security impact
CVE-2021-43313 (A heap-based buffer overflow was discovered in upx, during the
variabl ...)
- - upx-ucl <unfixed> (unimportant)
+ - upx-ucl 4.2.2-1 (unimportant)
NOTE: https://github.com/upx/upx/issues/378
NOTE:
https://github.com/upx/upx/commit/828a6cf07b69bc7314e888d7b76f0eafe125a3f6
NOTE: Crash in CLI tool, no security impact
CVE-2021-43312 (A heap-based buffer overflow was discovered in upx, during the
variabl ...)
- - upx-ucl <unfixed> (unimportant)
+ - upx-ucl 4.2.2-1 (unimportant)
NOTE: https://github.com/upx/upx/issues/379
NOTE:
https://github.com/upx/upx/commit/828a6cf07b69bc7314e888d7b76f0eafe125a3f6
NOTE: Crash in CLI tool, no security impact
CVE-2021-43311 (A heap-based buffer overflow was discovered in upx, during the
generic ...)
- - upx-ucl <unfixed> (unimportant)
+ - upx-ucl 4.2.2-1 (unimportant)
NOTE: https://github.com/upx/upx/issues/380
NOTE:
https://github.com/upx/upx/commit/b327645e648d46c8730be80730a171cf74cfe338
NOTE: Crash in CLI tool, no security impact
@@ -192248,14 +192248,14 @@ CVE-2021-3493 (The overlayfs implementation in the
linux kernel did not properly
[stretch] - linux <not-affected> (Unprivileged users cannot mount
overlayfs)
NOTE: https://www.openwall.com/lists/oss-security/2021/04/16/1
CVE-2021-30501 (An assertion abort was found in upx MemBuffer::alloc() in
mem.cpp, in ...)
- - upx-ucl <unfixed> (unimportant)
+ - upx-ucl 4.2.2-1 (unimportant)
NOTE: https://github.com/upx/upx/issues/486
NOTE: https://github.com/upx/upx/pull/487
- NOTE:
https://github.com/upx/upx/commit/28e761cd42211dfe0124b7a29b2f74730f453e46
+ NOTE:
https://github.com/upx/upx/commit/bf957f435ee59e3c0d7cc2c4fb27907d2e7829ed
(v3.99)
CVE-2021-30500 (Null pointer dereference was found in upx
PackLinuxElf::canUnpack() in ...)
- - upx-ucl <unfixed> (unimportant)
+ - upx-ucl 4.2.2-1 (unimportant)
NOTE: https://github.com/upx/upx/issues/485
- NOTE:
https://github.com/upx/upx/commit/90279abdfcd235172eab99651043051188938dcc
+ NOTE:
https://github.com/upx/upx/commit/be050693f229d629f56650f67f612fc68e285600
(v3.99)
CVE-2021-30499 (A flaw was found in libcaca. A buffer overflow of export.c in
function ...)
- libcaca 0.99.beta19-3 (bug #987278)
[bullseye] - libcaca <no-dsa> (Minor issue)
@@ -219041,9 +219041,9 @@ CVE-2021-20286 (A flaw was found in libnbd 1.7.3. An
assertion failure in nbd_un
NOTE: Fixed by:
https://gitlab.com/nbdkit/libnbd/-/commit/2216190ecbbd853648df6a3280c17b345b0907a0
(v1.6.2)
NOTE: Fixed by:
https://gitlab.com/nbdkit/libnbd/-/commit/fb4440de9cc76e9c14bd3ddf3333e78621f40ad0
(v1.7.3)
CVE-2021-20285 (A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96.
This flaw ...)
- - upx-ucl <unfixed> (unimportant)
+ - upx-ucl 4.2.2-1 (unimportant)
NOTE: https://github.com/upx/upx/issues/421
- NOTE:
https://github.com/upx/upx/commit/3781df9da23840e596d5e9e8493f22666802fe6c
+ NOTE:
https://github.com/upx/upx/commit/13bc031163863cb3866aa6cdc018dff0697aa5d4
(v3.99)
CVE-2021-20284 (A flaw was found in GNU Binutils 2.35.1, where there is a
heap-based b ...)
- binutils 2.37-3 (unimportant)
NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=26931
@@ -230581,33 +230581,33 @@ CVE-2020-27804
CVE-2020-27803
RESERVED
CVE-2020-27802 (An floating point exception was discovered in the elf_lookup
function ...)
- - upx-ucl <unfixed> (unimportant)
+ - upx-ucl 4.2.2-1 (unimportant)
NOTE: https://github.com/upx/upx/issues/393
NOTE:
https://github.com/upx/upx/commit/8d1d605b3d8c49bdfe9376454f0196738bed8166
CVE-2020-27801 (A heap-based buffer over-read was discovered in the get_le64
function ...)
- - upx-ucl <unfixed> (unimportant)
+ - upx-ucl 4.2.2-1 (unimportant)
NOTE: https://github.com/upx/upx/issues/394
- NOTE:
https://github.com/upx/upx/commit/49edccd7165696dcc0bf79f50cae4011313ddd28
+ NOTE:
https://github.com/upx/upx/commit/cc9ccdbbd12eb1fe2d926667d0427c63e95a0ca6
CVE-2020-27800 (A heap-based buffer over-read was discovered in the get_le32
function ...)
- - upx-ucl <unfixed> (unimportant)
+ - upx-ucl 4.2.2-1 (unimportant)
NOTE: https://github.com/upx/upx/issues/395
- NOTE:
https://github.com/upx/upx/commit/76cd518110a9e7597363012ff4e31bcd526a081e
+ NOTE:
https://github.com/upx/upx/commit/cc60f03b2eae1626155d0b6d97a2d9d7529616c7
CVE-2020-27799 (A heap-based buffer over-read was discovered in the
acc_ua_get_be32 fu ...)
- - upx-ucl <unfixed> (unimportant)
+ - upx-ucl 4.2.2-1 (unimportant)
NOTE: https://github.com/upx/upx/issues/391
- NOTE:
https://github.com/upx/upx/commit/8764fdc24c31c21dc43b2a2f99eb8c48a34e5e9c
+ NOTE:
https://github.com/upx/upx/commit/4e2fdb464a885c694408552c31739cb04b77bdcf
CVE-2020-27798 (An invalid memory address reference was discovered in the
adjABS funct ...)
- - upx-ucl <unfixed> (unimportant)
+ - upx-ucl 4.2.2-1 (unimportant)
NOTE: https://github.com/upx/upx/issues/396
- NOTE:
https://github.com/upx/upx/commit/624eb22d743db206f689a411a2272080b0d7f94f
+ NOTE:
https://github.com/upx/upx/commit/77c914bce58aab9459029bed699f2bfb7ff2f90f
CVE-2020-27797 (An invalid memory address reference was discovered in the
elf_lookup f ...)
- - upx-ucl <unfixed> (unimportant)
+ - upx-ucl 4.2.2-1 (unimportant)
NOTE: https://github.com/upx/upx/issues/390
- NOTE:
https://github.com/upx/upx/commit/7d093174597483053e95f07d9f4614024c09890e
+ NOTE:
https://github.com/upx/upx/commit/73b854874e723f38e84e5ff57a9eeb99653ca74c
CVE-2020-27796 (A heap-based buffer over-read was discovered in the
invert_pt_dynamic ...)
- - upx-ucl <unfixed> (unimportant)
+ - upx-ucl 4.2.2-1 (unimportant)
NOTE: https://github.com/upx/upx/issues/392
- NOTE:
https://github.com/upx/upx/commit/7d093174597483053e95f07d9f4614024c09890e
+ NOTE:
https://github.com/upx/upx/commit/73b854874e723f38e84e5ff57a9eeb99653ca74c
CVE-2020-27795 (A segmentation fault was discovered in radare2 with adf
command. In li ...)
- radare2 5.0.0+dfsg-1
NOTE:
https://github.com/radareorg/radare2/commit/4d3811681a80f92a53e795f6a64c4b0fc2c8dd22
(4.4.0)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/97d2be579e16b8abddc41e36019cab3611dbc97a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/97d2be579e16b8abddc41e36019cab3611dbc97a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
