[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d2e210c0 by security tracker role at 2018-03-14T09:10:17+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,3 +1,51 @@
+CVE-2018-8109
+	RESERVED
+CVE-2018-8108
+	RESERVED
+CVE-2018-8107 (The JPXStream::close function in JPXStream.cc in xpdf 4.00 allows ...)
+	TODO: check
+CVE-2018-8106 (The JPXStream::readTilePartData function in JPXStream.cc in xpdf 4.00 ...)
+	TODO: check
+CVE-2018-8105 (The JPXStream::fillReadBuf function in JPXStream.cc in xpdf 4.00 allows ...)
+	TODO: check
+CVE-2018-8104 (The BufStream::lookChar function in Stream.cc in xpdf 4.00 allows ...)
+	TODO: check
+CVE-2018-8103 (The JBIG2Stream::readGenericBitmap function in JBIG2Stream.cc in xpdf ...)
+	TODO: check
+CVE-2018-8102 (The JBIG2MMRDecoder::getBlackCode function in JBIG2Stream.cc in xpdf ...)
+	TODO: check
+CVE-2018-8101 (The JPXStream::inverseTransformLevel function in JPXStream.cc in xpdf ...)
+	TODO: check
+CVE-2018-8100 (The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 ...)
+	TODO: check
+CVE-2018-8099 (Incorrect returning of an error code in the index.c:read_entry() ...)
+	TODO: check
+CVE-2018-8098 (Integer overflow in the index.c:read_entry() function while ...)
+	TODO: check
+CVE-2018-8097
+	RESERVED
+CVE-2018-8096 (Datalust Seq before 4.2.605 is vulnerable to Authentication Bypass ...)
+	TODO: check
+CVE-2018-8095
+	RESERVED
+CVE-2018-1000128 (GPAC MP4Box version prior to commit ...)
+	TODO: check
+CVE-2018-1000127 (memcached version prior to 1.4.37 contains an Integer Overflow ...)
+	TODO: check
+CVE-2018-1000126 (Ajenti version 2 contains an Information Disclosure vulnerability in ...)
+	TODO: check
+CVE-2018-1000125 (inversoft prime-jwt version prior to version 1.3.0 or prior to commit ...)
+	TODO: check
+CVE-2018-1000124 (I Librarian I-librarian version 4.8 and earlier contains a XML ...)
+	TODO: check
+CVE-2018-1000123 (Ionic Team Cordova plugin iOS Keychain version before commit ...)
+	TODO: check
+CVE-2017-18231 (An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer ...)
+	TODO: check
+CVE-2017-18230 (An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer ...)
+	TODO: check
+CVE-2017-18229 (An issue was discovered in GraphicsMagick 1.3.26. An allocation failure ...)
+	TODO: check
 CVE-2018-8094
 	RESERVED
 CVE-2018-8093
@@ -17405,26 +17453,26 @@ CVE-2018-1446
 	RESERVED
 CVE-2018-1445
 	RESERVED
-CVE-2018-1444
-	RESERVED
+CVE-2018-1444 (IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site ...)
+	TODO: check
 CVE-2018-1443 (An XML parsing vulnerability affects IBM SAML-based single sign-on ...)
 	NOT-FOR-US: IBM
 CVE-2018-1442 (IBM Application Performance Management - Response Time Monitoring ...)
 	NOT-FOR-US: IBM
-CVE-2018-1441
-	RESERVED
+CVE-2018-1441 (IBM Application Performance Management - Response Time Monitoring ...)
+	TODO: check
 CVE-2018-1440
 	RESERVED
 CVE-2018-1439
 	RESERVED
 CVE-2018-1438
 	RESERVED
-CVE-2018-1437
-	RESERVED
+CVE-2018-1437 (IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary ...)
+	TODO: check
 CVE-2018-1436
 	RESERVED
-CVE-2018-1435
-	RESERVED
+CVE-2018-1435 (IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack. A ...)
+	TODO: check
 CVE-2018-1434
 	RESERVED
 CVE-2018-1433
@@ -17521,8 +17569,8 @@ CVE-2018-1388 (GSKit V7 may disclose side channel information via discrepancies 
 	NOT-FOR-US: IBM WebSphere MQ
 CVE-2018-1387 (IBM Application Performance Management for Monitoring & Diagnostics ...)
 	NOT-FOR-US: IBM
-CVE-2018-1386
-	RESERVED
+CVE-2018-1386 (IBM Tivoli Workload Automation for AIX (IBM Workload Scheduler 8.6, ...)
+	TODO: check
 CVE-2018-1385
 	RESERVED
 CVE-2018-1384
@@ -68535,8 +68583,8 @@ CVE-2017-1743
 	RESERVED
 CVE-2017-1742
 	RESERVED
-CVE-2017-1741
-	RESERVED
+CVE-2017-1741 (IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a ...)
+	TODO: check
 CVE-2017-1740 (IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and ...)
 	NOT-FOR-US: IBM Curam Social Program Management
 CVE-2017-1739 (IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 is ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d2e210c084f088ad0eb4f6a1d645342cdb7c5d5b

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d2e210c084f088ad0eb4f6a1d645342cdb7c5d5b
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180314/29370062/attachment.html>