[Git][security-tracker-team/security-tracker][master] Add new set of wireshark issues

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a6afe1de by Salvatore Bonaccorso at 2018-07-19T10:41:52+02:00
Add new set of wireshark issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -95,13 +95,25 @@ CVE-2018-14372
 CVE-2018-14371 (The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra ...)
 	TODO: check
 CVE-2018-14370 (In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14686
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=b1446124eebc3ea5591d18e719c2a5cff3630638
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2018-43.html
 CVE-2018-14369 (In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14869
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=038cd225bfa54e2a7ade4043118796334920a61e
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2018-41.html
 CVE-2018-14368 (In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14841
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=6c44312f465014eb409d766a9828b7f101f6251c
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2018-40.html
 CVE-2018-14367 (In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14966
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=81ce5fcb3e37a0aaeb7532f7a2a09366f16fa310
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2018-42.html
 CVE-2018-14366
 	RESERVED
 CVE-2018-14365
@@ -204,17 +216,35 @@ CVE-2018-14345 (An issue was discovered in SDDM through 0.17.0. If configured wi
 	NOTE: https://bugzilla.suse.com/show_bug.cgi?id=1101450
 	NOTE: https://github.com/sddm/sddm/commit/147cec383892d143b5e02daa70f1e7def50f5d98
 CVE-2018-14344 (In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14672
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=4f7153685b39a164aea09ba7f96ebb648b8328ae
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2018-35.html
 CVE-2018-14343 (In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14682
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=9402f2f80c6bc7d25178a0875c5a1f5ee36361db
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2018-37.html
 CVE-2018-14342 (In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=13741
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=36af43dbb7673495948cd65d0346e8b9812b941c
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2018-34.html
 CVE-2018-14341 (In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14742
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=2e716c32be6aa20e1813b0002878853e71f8b2f4
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2018-39.html
 CVE-2018-14340 (In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14675
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=672d882a53f96730e4ef1e5b1639c585823b0df8
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2018-36.html
 CVE-2018-14339 (In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ...)
-	TODO: check
+	- wireshark <unfixed>
+	NOTE: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14738
+	NOTE: https://code.wireshark.org/review/gitweb?p=wireshark.git;a=commit;h=3b77c0a596a8071aebc1de71e3f79e5e15e919ca
+	NOTE: https://www.wireshark.org/security/wnpa-sec-2018-38.html
 CVE-2018-14338 (samples/geotag.cpp in the example code of Exiv2 0.26 misuses the ...)
 	- exiv2 <unfixed> (unimportant)
 	NOTE: https://github.com/Exiv2/exiv2/issues/382



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a6afe1dec7a7d4f223822060f2ea85b98286a1bb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a6afe1dec7a7d4f223822060f2ea85b98286a1bb
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180719/fc4117bb/attachment.html>