On 9/12/21 7:03 AM, Steve Sakoman wrote:
> Branch: master
>
> New this week: 8 CVEs
> CVE-2020-18974: nasm:nasm-native 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-18974 *
> CVE-2021-36690: sqlite3:sqlite3-native 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-36690 *
> CVE-2021-3713: qemu:qemu-native:qemu-system-native 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-3713 *
> CVE-2021-37701: tar 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-37701 *
> CVE-2021-3770: vim 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-3770 *
> CVE-2021-37712: tar 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-37712 *
> CVE-2021-37713: tar 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-37713 *
> CVE-2021-40491: inetutils 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-40491 *
>
> Removed this week: 2 CVEs
> CVE-2019-6293: flex:flex-native 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-6293 *
> CVE-2021-29923: go 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-29923 *
>
> Full list:  Found 14 unpatched CVEs
> CVE-2019-12067: qemu:qemu-native:qemu-system-native 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-12067 *
> CVE-2020-18974: nasm:nasm-native 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-18974 *
> CVE-2020-35503: qemu:qemu-native:qemu-system-native 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-35503 *
> CVE-2021-20255: qemu:qemu-native:qemu-system-native 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-20255 *
> CVE-2021-31879: wget 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-31879 *
> CVE-2021-3507: qemu:qemu-native:qemu-system-native 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-3507 *
> CVE-2021-36690: sqlite3:sqlite3-native 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-36690 *
> CVE-2021-36976: libarchive:libarchive-native 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-36976 *
> CVE-2021-3713: qemu:qemu-native:qemu-system-native 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-3713 *
> CVE-2021-3770: vim 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-3770 *
> CVE-2021-37701: tar 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-37701 *
> CVE-2021-37712: tar 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-37712 *
> CVE-2021-37713: tar 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-37713 *
Three above Tar are against node-tar

-armin
> CVE-2021-40491: inetutils 
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-40491 *
>
> 
>

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#155958): 
https://lists.openembedded.org/g/openembedded-core/message/155958
Mute This Topic: https://lists.openembedded.org/mt/85554845/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to