[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso carnil at debian.org
Mon Aug 19 21:10:35 BST 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
319c57e4 by security tracker role at 2019-08-19T20:10:25Z
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,103 @@
+CVE-2019-15210
+	RESERVED
+CVE-2019-15209
+	RESERVED
+CVE-2019-15208
+	RESERVED
+CVE-2019-15207
+	RESERVED
+CVE-2019-15206
+	RESERVED
+CVE-2019-15205
+	RESERVED
+CVE-2019-15204
+	RESERVED
+CVE-2019-15203
+	RESERVED
+CVE-2019-15202
+	RESERVED
+CVE-2019-15201
+	RESERVED
+CVE-2019-15200
+	RESERVED
+CVE-2019-15199
+	RESERVED
+CVE-2019-15198
+	RESERVED
+CVE-2019-15197
+	RESERVED
+CVE-2019-15196
+	RESERVED
+CVE-2019-15195
+	RESERVED
+CVE-2019-15194
+	RESERVED
+CVE-2019-15193
+	RESERVED
+CVE-2019-15192
+	RESERVED
+CVE-2019-15191
+	RESERVED
+CVE-2019-15190
+	RESERVED
+CVE-2019-15189
+	RESERVED
+CVE-2019-15188
+	RESERVED
+CVE-2019-15187
+	RESERVED
+CVE-2019-15186
+	RESERVED
+CVE-2019-15185
+	RESERVED
+CVE-2019-15184
+	RESERVED
+CVE-2019-15183
+	RESERVED
+CVE-2019-15182
+	RESERVED
+CVE-2019-15181
+	RESERVED
+CVE-2019-15180
+	RESERVED
+CVE-2019-15179
+	RESERVED
+CVE-2019-15178
+	RESERVED
+CVE-2019-15177
+	RESERVED
+CVE-2019-15176
+	RESERVED
+CVE-2019-15175
+	RESERVED
+CVE-2019-15174
+	RESERVED
+CVE-2019-15173
+	RESERVED
+CVE-2019-15172
+	RESERVED
+CVE-2019-15171
+	RESERVED
+CVE-2019-15170
+	RESERVED
+CVE-2019-15169
+	RESERVED
+CVE-2019-15168
+	RESERVED
+CVE-2019-15167
+	RESERVED
+CVE-2019-15166
+	RESERVED
+CVE-2019-15165
+	RESERVED
+CVE-2019-15164
+	RESERVED
+CVE-2019-15163
+	RESERVED
+CVE-2019-15162
+	RESERVED
+CVE-2019-15161
+	RESERVED
 CVE-2019-15160 (The SweetXml (aka sweet_xml) package through 0.6.6 for Erlang and Elix ...)
 	NOT-FOR-US: SweetXml (aka sweet_xml) package for Erlang and Elixir
 CVE-2019-15159
@@ -21,7 +121,7 @@ CVE-2019-15151 (AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h.
 	NOTE: https://github.com/adplug/adplug/issues/91
 CVE-2019-15150 (In the OAuth2 Client extension before 0.4 for MediaWiki, a CSRF vulner ...)
 	TODO: check
-CVE-2019-15149 (core.py in Mitogen before 0.2.8 has a typo that drops the unidirection ...)
+CVE-2019-15149 (** DISPUTED ** core.py in Mitogen before 0.2.8 has a typo that drops t ...)
 	TODO: check
 CVE-2018-20976 (An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel befo ...)
 	- linux 4.18.6-1
@@ -11743,8 +11843,8 @@ CVE-2019-11278
 	RESERVED
 CVE-2019-11277
 	RESERVED
-CVE-2019-11276
-	RESERVED
+CVE-2019-11276 (Pivotal Apps Manager, included in Pivotal Application Service versions ...)
+	TODO: check
 CVE-2019-11275
 	RESERVED
 CVE-2019-11274 (Cloud Foundry UAA, versions prior to 74.0.0, is vulnerable to an XSS a ...)
@@ -12033,10 +12133,10 @@ CVE-2019-11165
 	RESERVED
 CVE-2019-11164
 	RESERVED
-CVE-2019-11163
-	RESERVED
-CVE-2019-11162
-	RESERVED
+CVE-2019-11163 (Insufficient access control in a hardware abstraction driver for Intel ...)
+	TODO: check
+CVE-2019-11162 (Insufficient access control in hardware abstraction in SEMA driver for ...)
+	TODO: check
 CVE-2019-11161
 	RESERVED
 CVE-2019-11160
@@ -12063,24 +12163,24 @@ CVE-2019-11150
 	RESERVED
 CVE-2019-11149
 	RESERVED
-CVE-2019-11148
-	RESERVED
+CVE-2019-11148 (Improper permissions in the installer for Intel(R) Remote Displays SDK ...)
+	TODO: check
 CVE-2019-11147
 	RESERVED
-CVE-2019-11146
-	RESERVED
-CVE-2019-11145
-	RESERVED
+CVE-2019-11146 (Improper file verification in Intel® Driver & Support Assista ...)
+	TODO: check
+CVE-2019-11145 (Improper file verification in Intel® Driver & Support Assista ...)
+	TODO: check
 CVE-2019-11144
 	RESERVED
-CVE-2019-11143
-	RESERVED
+CVE-2019-11143 (Improper permissions in the software installer for Intel(R) Authentica ...)
+	TODO: check
 CVE-2019-11142
 	RESERVED
 CVE-2019-11141
 	RESERVED
-CVE-2019-11140
-	RESERVED
+CVE-2019-11140 (Insufficient session validation in system firmware for Intel(R) NUC ma ...)
+	TODO: check
 CVE-2019-11139
 	RESERVED
 CVE-2019-11138
@@ -25829,8 +25929,8 @@ CVE-2019-6180
 	RESERVED
 CVE-2019-6179
 	RESERVED
-CVE-2019-6178
-	RESERVED
+CVE-2019-6178 (An information leakage vulnerability in Iomega and LenovoEMC NAS produ ...)
+	TODO: check
 CVE-2019-6177
 	RESERVED
 CVE-2019-6176
@@ -25843,8 +25943,8 @@ CVE-2019-6173
 	RESERVED
 CVE-2019-6172
 	RESERVED
-CVE-2019-6171
-	RESERVED
+CVE-2019-6171 (A vulnerability was reported in various BIOS versions of older ThinkPa ...)
+	TODO: check
 CVE-2019-6170
 	RESERVED
 CVE-2019-6169 (A vulnerability reported in Lenovo Service Bridge before version 4.1.0 ...)
@@ -25855,8 +25955,8 @@ CVE-2019-6167 (A vulnerability reported in Lenovo Service Bridge before version
 	NOT-FOR-US: Lenovo Service Bridge
 CVE-2019-6166 (A vulnerability reported in Lenovo Service Bridge before version 4.1.0 ...)
 	NOT-FOR-US: Lenovo Service Bridge
-CVE-2019-6165
-	RESERVED
+CVE-2019-6165 (A DLL search path vulnerability was reported in PaperDisplay Hotkey Se ...)
+	TODO: check
 CVE-2019-6164
 	RESERVED
 CVE-2019-6163 (A denial of service vulnerability was reported in Lenovo System Update ...)
@@ -25867,8 +25967,8 @@ CVE-2019-6161
 	RESERVED
 CVE-2019-6160 (A vulnerability in various versions of Iomega and LenovoEMC NAS produc ...)
 	NOT-FOR-US: Iomega and LenovoEMC NAS products
-CVE-2019-6159
-	RESERVED
+CVE-2019-6159 (A stored cross-site scripting (XSS) vulnerability exists in various fi ...)
+	TODO: check
 CVE-2019-6158 (An internal product security audit of Lenovo XClarity Administrator (L ...)
 	NOT-FOR-US: Lenovo XClarity Administrator (LXCA)
 CVE-2019-6157 (In various firmware versions of Lenovo System x, the integrated manage ...)
@@ -27322,8 +27422,8 @@ CVE-2019-5633
 	RESERVED
 CVE-2019-5632
 	RESERVED
-CVE-2019-5631
-	RESERVED
+CVE-2019-5631 (The Rapid7 InsightAppSec broker suffers from a DLL injection vulnerabi ...)
+	TODO: check
 CVE-2019-5630 (A Cross-Site Request Forgery (CSRF) vulnerability was found in Rapid7  ...)
 	NOT-FOR-US: Rapid7 Nexpose InsightVM Security Console
 CVE-2019-5629 (Rapid7 Insight Agent, version 2.6.3 and prior, suffers from a local pr ...)
@@ -43220,8 +43320,8 @@ CVE-2019-0175 (Insufficient password protection in the attestation database for
 CVE-2019-0174 (Logic condition in specific microprocessors may allow an authenticated ...)
 	NOT-FOR-US: RamBleed hardware vulnerability
 	NOTE: https://rambleed.com/
-CVE-2019-0173
-	RESERVED
+CVE-2019-0173 (Authentication bypass in the web console for Intel(R) Raid Web Console ...)
+	TODO: check
 CVE-2019-0172 (A logic issue in Intel Unite(R) Client for Android prior to version 4. ...)
 	NOT-FOR-US: Intel Unite(R) Client for Android
 CVE-2019-0171 (Improper directory permissions in the installer for Intel(R) Quartus(R ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/319c57e47dc8a098e5a7d28a16858bfd660c9509

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/319c57e47dc8a098e5a7d28a16858bfd660c9509
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190819/566ec27d/attachment.html>


More information about the debian-security-tracker-commits mailing list