Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
3712ff60 by Salvatore Bonaccorso at 2024-07-18T22:00:21+02:00
Process various Oracle related CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -255,129 +255,129 @@ CVE-2024-21687 (This High severity File Inclusion 
vulnerability was introduced i
 CVE-2024-21188 (Vulnerability in the Oracle Financial Services Revenue 
Management and  ...)
        NOT-FOR-US: Oracle
 CVE-2024-21185 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 <unfixed>
 CVE-2024-21184 (Vulnerability in the Oracle Database RDBMS Security component 
of Oracl ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21183 (Vulnerability in the Oracle WebLogic Server product of Oracle 
Fusion M ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21182 (Vulnerability in the Oracle WebLogic Server product of Oracle 
Fusion M ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21181 (Vulnerability in the Oracle WebLogic Server product of Oracle 
Fusion M ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21180 (Vulnerability in the PeopleSoft Enterprise PeopleTools product 
of Orac ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21179 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.38-1
 CVE-2024-21178 (Vulnerability in the PeopleSoft Enterprise PeopleTools product 
of Orac ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21177 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.38-1
 CVE-2024-21176 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 <not-affected> (Vulnerable code not present)
 CVE-2024-21175 (Vulnerability in the Oracle WebLogic Server product of Oracle 
Fusion M ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21174 (Vulnerability in the Java VM component of Oracle Database 
Server.  Sup ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21173 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.38-1
 CVE-2024-21171 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.38-1
 CVE-2024-21170 (Vulnerability in the MySQL Connectors product of Oracle MySQL 
(compone ...)
-       TODO: check
+       - mysql-connector-python <unfixed>
 CVE-2024-21169 (Vulnerability in the Oracle Marketing product of Oracle 
E-Business Sui ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21168 (Vulnerability in the JD Edwards EnterpriseOne Orchestrator 
product of  ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21167 (Vulnerability in the Oracle Trading Community product of 
Oracle E-Busi ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21166 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.37-1
 CVE-2024-21165 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.38-1
 CVE-2024-21164 (Vulnerability in the Oracle VM VirtualBox product of Oracle 
Virtualiza ...)
-       TODO: check
+       - virtualbox 7.0.20-dfsg-1
 CVE-2024-21163 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.38-1
 CVE-2024-21162 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.38-1
 CVE-2024-21161 (Vulnerability in the Oracle VM VirtualBox product of Oracle 
Virtualiza ...)
-       TODO: check
+       - virtualbox 7.0.20-dfsg-1
 CVE-2024-21160 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.37-1
 CVE-2024-21159 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.37-1
 CVE-2024-21158 (Vulnerability in the PeopleSoft Enterprise PeopleTools product 
of Orac ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21157 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.37-1
 CVE-2024-21155 (Vulnerability in the Oracle ZFS Storage Appliance Kit product 
of Oracl ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21154 (Vulnerability in the PeopleSoft Enterprise HCM Human Resources 
product ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21153 (Vulnerability in the Oracle Process Manufacturing Product 
Development  ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21152 (Vulnerability in the Oracle Process Manufacturing Financials 
product o ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21151 (Vulnerability in the Oracle Solaris product of Oracle Systems 
(compone ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21150 (Vulnerability in the JD Edwards EnterpriseOne Tools product of 
Oracle  ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21149 (Vulnerability in the Oracle Enterprise Asset Management 
product of Ora ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21148 (Vulnerability in the Oracle Applications Framework product of 
Oracle E ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21147 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, 
Oracle Gr ...)
        TODO: check
 CVE-2024-21146 (Vulnerability in the Oracle Trade Management product of Oracle 
E-Busin ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21145 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, 
Oracle Gr ...)
        TODO: check
 CVE-2024-21144 (Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise 
Edition ...)
        TODO: check
 CVE-2024-21143 (Vulnerability in the Oracle iStore product of Oracle 
E-Business Suite  ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21142 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.38-1
 CVE-2024-21141 (Vulnerability in the Oracle VM VirtualBox product of Oracle 
Virtualiza ...)
-       TODO: check
+       - virtualbox 7.0.20-dfsg-1
 CVE-2024-21140 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, 
Oracle Gr ...)
        TODO: check
 CVE-2024-21139 (Vulnerability in the Oracle Business Intelligence Enterprise 
Edition p ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21138 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, 
Oracle Gr ...)
        TODO: check
 CVE-2024-21137 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.36-1
 CVE-2024-21136 (Vulnerability in the Oracle Retail Xstore Office product of 
Oracle Ret ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21135 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.37-1
 CVE-2024-21134 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.38-1
 CVE-2024-21133 (Vulnerability in the Oracle Reports Developer product of 
Oracle Fusion ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21132 (Vulnerability in the Oracle Purchasing product of Oracle 
E-Business Su ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21131 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, 
Oracle Gr ...)
        TODO: check
 CVE-2024-21130 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.38-1
 CVE-2024-21129 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.38-1
 CVE-2024-21128 (Vulnerability in the Oracle Application Object Library product 
of Orac ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21127 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.38-1
 CVE-2024-21126 (Vulnerability in the Oracle Database Portable Clusterware 
component of ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21125 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.38-1
 CVE-2024-21123 (Vulnerability in the Oracle Database Core component of Oracle 
Database ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-21122 (Vulnerability in the PeopleSoft Enterprise HCM Shared 
Components produ ...)
-       TODO: check
+       NOT-FOR-US: Oracle
 CVE-2024-20996 (Vulnerability in the MySQL Server product of Oracle MySQL 
(component:  ...)
-       TODO: check
+       - mysql-8.0 8.0.38-1
 CVE-2023-7013 (Inappropriate implementation in Compositing in Google Chrome 
prior to  ...)
        TODO: check
 CVE-2023-7012 (Insufficient data validation in Permission Prompts in Google 
Chrome pr ...)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3712ff6040b9661a2607ed3cae1fb033ed0df714

-- 
This project does not include diff previews in email notifications.
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3712ff6040b9661a2607ed3cae1fb033ed0df714
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to