Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b7eb889b by security tracker role at 2022-05-26T08:10:25+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,247 @@
+CVE-2022-31733
+ RESERVED
+CVE-2022-31732
+ RESERVED
+CVE-2022-31731
+ RESERVED
+CVE-2022-31730
+ RESERVED
+CVE-2022-31729
+ RESERVED
+CVE-2022-31728
+ RESERVED
+CVE-2022-31727
+ RESERVED
+CVE-2022-31726
+ RESERVED
+CVE-2022-31725
+ RESERVED
+CVE-2022-31724
+ RESERVED
+CVE-2022-31723
+ RESERVED
+CVE-2022-31722
+ RESERVED
+CVE-2022-31721
+ RESERVED
+CVE-2022-31720
+ RESERVED
+CVE-2022-31719
+ RESERVED
+CVE-2022-31718
+ RESERVED
+CVE-2022-31717
+ RESERVED
+CVE-2022-31716
+ RESERVED
+CVE-2022-31715
+ RESERVED
+CVE-2022-31714
+ RESERVED
+CVE-2022-31713
+ RESERVED
+CVE-2022-31712
+ RESERVED
+CVE-2022-31711
+ RESERVED
+CVE-2022-31710
+ RESERVED
+CVE-2022-31709
+ RESERVED
+CVE-2022-31708
+ RESERVED
+CVE-2022-31707
+ RESERVED
+CVE-2022-31706
+ RESERVED
+CVE-2022-31705
+ RESERVED
+CVE-2022-31704
+ RESERVED
+CVE-2022-31703
+ RESERVED
+CVE-2022-31702
+ RESERVED
+CVE-2022-31701
+ RESERVED
+CVE-2022-31700
+ RESERVED
+CVE-2022-31699
+ RESERVED
+CVE-2022-31698
+ RESERVED
+CVE-2022-31697
+ RESERVED
+CVE-2022-31696
+ RESERVED
+CVE-2022-31695
+ RESERVED
+CVE-2022-31694
+ RESERVED
+CVE-2022-31693
+ RESERVED
+CVE-2022-31692
+ RESERVED
+CVE-2022-31691
+ RESERVED
+CVE-2022-31690
+ RESERVED
+CVE-2022-31689
+ RESERVED
+CVE-2022-31688
+ RESERVED
+CVE-2022-31687
+ RESERVED
+CVE-2022-31686
+ RESERVED
+CVE-2022-31685
+ RESERVED
+CVE-2022-31684
+ RESERVED
+CVE-2022-31683
+ RESERVED
+CVE-2022-31682
+ RESERVED
+CVE-2022-31681
+ RESERVED
+CVE-2022-31680
+ RESERVED
+CVE-2022-31679
+ RESERVED
+CVE-2022-31678
+ RESERVED
+CVE-2022-31677
+ RESERVED
+CVE-2022-31676
+ RESERVED
+CVE-2022-31675
+ RESERVED
+CVE-2022-31674
+ RESERVED
+CVE-2022-31673
+ RESERVED
+CVE-2022-31672
+ RESERVED
+CVE-2022-31671
+ RESERVED
+CVE-2022-31670
+ RESERVED
+CVE-2022-31669
+ RESERVED
+CVE-2022-31668
+ RESERVED
+CVE-2022-31667
+ RESERVED
+CVE-2022-31666
+ RESERVED
+CVE-2022-31665
+ RESERVED
+CVE-2022-31664
+ RESERVED
+CVE-2022-31663
+ RESERVED
+CVE-2022-31662
+ RESERVED
+CVE-2022-31661
+ RESERVED
+CVE-2022-31660
+ RESERVED
+CVE-2022-31659
+ RESERVED
+CVE-2022-31658
+ RESERVED
+CVE-2022-31657
+ RESERVED
+CVE-2022-31656
+ RESERVED
+CVE-2022-31655
+ RESERVED
+CVE-2022-31654
+ RESERVED
+CVE-2022-31653
+ RESERVED
+CVE-2022-31652
+ RESERVED
+CVE-2022-31651 (In SoX 14.4.2, there is an assertion failure in rate_init in
rate.c in ...)
+ TODO: check
+CVE-2022-31650 (In SoX 14.4.2, there is a floating-point exception in
lsx_aiffstartwri ...)
+ TODO: check
+CVE-2022-31649
+ RESERVED
+CVE-2022-31648
+ RESERVED
+CVE-2022-31647
+ RESERVED
+CVE-2022-31646
+ RESERVED
+CVE-2022-31645
+ RESERVED
+CVE-2022-31644
+ RESERVED
+CVE-2022-31643
+ RESERVED
+CVE-2022-31642
+ RESERVED
+CVE-2022-31641
+ RESERVED
+CVE-2022-31640
+ RESERVED
+CVE-2022-31639
+ RESERVED
+CVE-2022-31638
+ RESERVED
+CVE-2022-31637
+ RESERVED
+CVE-2022-31636
+ RESERVED
+CVE-2022-31635
+ RESERVED
+CVE-2022-31634
+ RESERVED
+CVE-2022-31633
+ RESERVED
+CVE-2022-31632
+ RESERVED
+CVE-2022-31631
+ RESERVED
+CVE-2022-31630
+ RESERVED
+CVE-2022-31629
+ RESERVED
+CVE-2022-31628
+ RESERVED
+CVE-2022-31627
+ RESERVED
+CVE-2022-31626
+ RESERVED
+CVE-2022-31625
+ RESERVED
+CVE-2022-31624 (MariaDB Server before 10.7 is vulnerable to Denial of Service.
While e ...)
+ TODO: check
+CVE-2022-31623 (MariaDB Server before 10.7 is vulnerable to Denial of Service.
In extr ...)
+ TODO: check
+CVE-2022-31622 (MariaDB Server before 10.7 is vulnerable to Denial of Service.
In extr ...)
+ TODO: check
+CVE-2022-31621 (MariaDB Server before 10.7 is vulnerable to Denial of Service.
In extr ...)
+ TODO: check
+CVE-2022-31620 (In libjpeg before 1.64, BitStream<false>::Get in
bitstream.hpp h ...)
+ TODO: check
+CVE-2022-30533
+ RESERVED
+CVE-2022-1893
+ RESERVED
+CVE-2022-1892
+ RESERVED
+CVE-2022-1891
+ RESERVED
+CVE-2022-1890
+ RESERVED
+CVE-2022-1889
+ RESERVED
+CVE-2022-1888
+ RESERVED
+CVE-2021-4231
+ RESERVED
CVE-2022-31619
RESERVED
CVE-2022-1887
@@ -1540,8 +1784,8 @@ CVE-2022-31006
RESERVED
CVE-2022-31005
RESERVED
-CVE-2022-31004
- RESERVED
+CVE-2022-31004 (CVEProject/cve-services is an open source project used to
operate the ...)
+ TODO: check
CVE-2022-31003
RESERVED
CVE-2022-31002
@@ -1550,8 +1794,8 @@ CVE-2022-31001
RESERVED
CVE-2022-31000
RESERVED
-CVE-2022-30999
- RESERVED
+CVE-2022-30999 (FriendsofFlarum (FoF) Upload is an extension that handles file
uploads ...)
+ TODO: check
CVE-2022-30996
RESERVED
CVE-2022-30995
@@ -6645,24 +6889,23 @@ CVE-2022-29258
RESERVED
CVE-2022-29257
RESERVED
-CVE-2022-29256
- RESERVED
+CVE-2022-29256 (sharp is an application for Node.js image processing. Prior to
version ...)
+ TODO: check
CVE-2022-29255
RESERVED
CVE-2022-29254
RESERVED
-CVE-2022-29253
- RESERVED
-CVE-2022-29252
- RESERVED
-CVE-2022-29251
- RESERVED
+CVE-2022-29253 (XWiki Platform is a generic wiki platform offering runtime
services fo ...)
+ TODO: check
+CVE-2022-29252 (XWiki Platform Wiki UI Main Wiki is a package for managing
subwikis. S ...)
+ TODO: check
+CVE-2022-29251 (XWiki Platform Flamingo Theme UI is a tool that allows
customization a ...)
+ TODO: check
CVE-2022-29250
RESERVED
CVE-2022-29249 (JavaEZ is a library that adds new functions to make Java
easier. A wea ...)
TODO: check
-CVE-2022-29248
- RESERVED
+CVE-2022-29248 (Guzzle is a PHP HTTP client. Guzzle prior to versions 6.5.6
and 7.4.3 ...)
- guzzle <unfixed> (bug #1011636)
NOTE:
https://github.com/guzzle/guzzle/security/advisories/GHSA-cwmx-hcrq-mhc3
CVE-2022-29247
@@ -8113,8 +8356,8 @@ CVE-2022-26841
RESERVED
CVE-2022-26837
RESERVED
-CVE-2022-26833
- RESERVED
+CVE-2022-26833 (An improper authentication vulnerability exists in the REST
API functi ...)
+ TODO: check
CVE-2022-26515
RESERVED
CVE-2022-26513
@@ -12734,8 +12977,8 @@ CVE-2021-46711
RESERVED
CVE-2021-46710
RESERVED
-CVE-2022-27169
- RESERVED
+CVE-2022-27169 (An information disclosure vulnerability exists in the OAS
Engine Secur ...)
+ TODO: check
CVE-2022-27167 (Privilege escalation vulnerability in Windows products of
ESET, spol. ...)
NOT-FOR-US: ESET
CVE-2022-27166
@@ -12744,20 +12987,20 @@ CVE-2022-26511 (WPS Presentation 11.8.0.5745
insecurely load d3dx9_41.dll when o
NOT-FOR-US: WPS Presentation
CVE-2022-26510 (A firmware update vulnerability exists in the iburn firmware
checks fu ...)
NOT-FOR-US: InHand Networks InRouter302
-CVE-2022-26303
- RESERVED
-CVE-2022-26082
- RESERVED
+CVE-2022-26303 (An external config control vulnerability exists in the OAS
Engine Secu ...)
+ TODO: check
+CVE-2022-26082 (A file write vulnerability exists in the OAS Engine
SecureTransferFile ...)
+ TODO: check
CVE-2022-26081 (The installer of WPS Office Version 10.8.0.5745 insecurely
load shcore ...)
NOT-FOR-US: WPS Office
-CVE-2022-26077
- RESERVED
-CVE-2022-26067
- RESERVED
-CVE-2022-26043
- RESERVED
-CVE-2022-26026
- RESERVED
+CVE-2022-26077 (A cleartext transmission of sensitive information
vulnerability exists ...)
+ TODO: check
+CVE-2022-26067 (An information disclosure vulnerability exists in the OAS
Engine Secur ...)
+ TODO: check
+CVE-2022-26043 (An external config control vulnerability exists in the OAS
Engine Secu ...)
+ TODO: check
+CVE-2022-26026 (A denial of service vulnerability exists in the OAS Engine
SecureConfi ...)
+ TODO: check
CVE-2022-25969 (The installer of WPS Office Version 10.8.0.6186 insecurely
load VERSIO ...)
NOT-FOR-US: WPS Office
CVE-2022-25949 (The kernel mode driver kwatch3 of KINGSOFT Internet Security 9
Plus Ve ...)
@@ -20058,7 +20301,7 @@ CVE-2022-24586 (A stored cross-site scripting (XSS)
vulnerability in the compone
CVE-2022-24585 (A stored cross-site scripting (XSS) vulnerability in the
component /co ...)
- pluxml <unfixed> (bug #1008264)
NOTE:
https://github.com/Nguyen-Trung-Kien/CVE/blob/main/CVE-2022-24585/CVE-2022-24585.pdf
-CVE-2022-24584 (Incorrect access control in Yubico OTP functionality of the
YubiKey ha ...)
+CVE-2022-24584 (** DISPUTED ** Incorrect access control in Yubico OTP
functionality of ...)
NOT-FOR-US: yubico.com
CVE-2022-24583
RESERVED
@@ -23554,7 +23797,7 @@ CVE-2022-23636 (Wasmtime is an open source runtime for
WebAssembly & WASI. P
CVE-2022-23635 (Istio is an open platform to connect, manage, and secure
microservices ...)
NOT-FOR-US: Istio
CVE-2022-23634 (Puma is a Ruby/Rack web server built for parallelism. Prior to
`puma` ...)
- {DSA-5146-1}
+ {DSA-5146-1 DLA-3023-1}
- puma <unfixed> (bug #1005391)
NOTE:
https://github.com/puma/puma/security/advisories/GHSA-rmj8-8hhh-gv5h
NOTE:
https://github.com/puma/puma/commit/b70f451fe8abc0cff192c065d549778452e155bb
@@ -168183,6 +168426,7 @@ CVE-2020-5248 (GLPI before before version 9.4.6 has a
vulnerability involving a
NOTE:
https://github.com/glpi-project/glpi/security/advisories/GHSA-j222-j9mf-h6j9
NOTE:
https://github.com/glpi-project/glpi/commit/efd14468c92c4da43333aa9735e65fd20cbc7c6c
CVE-2020-5247 (In Puma (RubyGem) before 4.3.2 and before 3.12.3, if an
application us ...)
+ {DLA-3023-1}
- puma 3.12.4-1 (bug #952766)
[buster] - puma 3.12.0-2+deb10u2
NOTE:
https://github.com/puma/puma/security/advisories/GHSA-84j7-475p-hp8v
@@ -189198,6 +189442,7 @@ CVE-2019-16772 (The serialize-to-js NPM package
before version 3.0.1 is vulnerab
CVE-2019-16771 (Versions of Armeria 0.85.0 through and including 0.96.0 are
vulnerable ...)
NOT-FOR-US: Armeria
CVE-2019-16770 (In Puma before versions 3.12.2 and 4.3.1, a poorly-behaved
client coul ...)
+ {DLA-3023-1}
- puma 3.12.0-4 (bug #946312)
[buster] - puma 3.12.0-2+deb10u1
NOTE:
https://github.com/puma/puma/security/advisories/GHSA-7xx3-m584-x994
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b7eb889bf56e2198c1eda064a103ccb2dd1207fd
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b7eb889bf56e2198c1eda064a103ccb2dd1207fd
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
