Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5634b802 by Salvatore Bonaccorso at 2022-01-09T09:25:42+01:00
Process some NFUs
- - - - -
6f88f15f by Salvatore Bonaccorso at 2022-01-09T09:33:07+01:00
Add CVE-2022-22846/python-dnslib
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3,7 +3,8 @@ CVE-2022-22848
CVE-2022-22847
RESERVED
CVE-2022-22846 (The dnslib package through 0.9.16 for Python does not verify
that the ...)
- TODO: check
+ - python-dnslib <unfixed>
+ NOTE: https://github.com/paulc/dnslib/issues/30
CVE-2022-22845
RESERVED
CVE-2022-22844 (LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in
tif_unix.c i ...)
@@ -41,11 +42,11 @@ CVE-2022-22829
CVE-2022-22828
RESERVED
CVE-2021-46166 (Zoho ManageEngine Desktop Central before 10.0.662 allows
authenticated ...)
- TODO: check
+ NOT-FOR-US: Zoho ManageEngine
CVE-2021-46165 (Zoho ManageEngine Desktop Central before 10.0.662, during
startup, lau ...)
- TODO: check
+ NOT-FOR-US: Zoho ManageEngine
CVE-2021-46164 (Zoho ManageEngine Desktop Central before 10.0.662 allows
remote code e ...)
- TODO: check
+ NOT-FOR-US: Zoho ManageEngine
CVE-2021-46163
RESERVED
CVE-2022-0156
@@ -2000,7 +2001,7 @@ CVE-2022-22291
CVE-2022-22290
RESERVED
CVE-2022-22289 (Improper access control vulnerability in S Assistant prior to
version ...)
- TODO: check
+ NOT-FOR-US: Samsung
CVE-2022-22288 (Improper authorization vulnerability in Galaxy Store prior to
4.5.36.5 ...)
NOT-FOR-US: Samsung
CVE-2022-22287 (Abitrary file access vulnerability in Samsung Email prior to
6.1.60.16 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5190fd68ecf881198f018f9df7929f28b20fbbf4...6f88f15f9285ffba621808e1961d54a217500b0b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/5190fd68ecf881198f018f9df7929f28b20fbbf4...6f88f15f9285ffba621808e1961d54a217500b0b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
