[Git][security-tracker-team/security-tracker][master] buster/stretch triage

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
698e2f5c by Moritz Muehlenhoff at 2019-07-25T15:03:20Z
buster/stretch triage

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -25,7 +25,9 @@ CVE-2019-14251
 CVE-2019-14250 (An issue was discovered in GNU libiberty, as distributed in GNU Binuti ...)
 	TODO: check
 CVE-2019-14249 (dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attacker ...)
-	TODO: check
+	- dwarfutils <unfixed> (low)
+	[buster] - dwarfutils <no-dsa> (Minor issue)
+	[stretch] - dwarfutils <no-dsa> (Minor issue)
 CVE-2019-14248 (In libnasm.a in Netwide Assembler (NASM) 2.14.xx, asm/pragma.c allows  ...)
 	- nasm <unfixed> (unimportant; bug #932907)
 	NOTE: https://bugzilla.nasm.us/show_bug.cgi?id=3392576
@@ -3474,6 +3476,7 @@ CVE-2019-13139 [command injection due to a missing validation of the git ref com
 	RESERVED
 	[experimental] - docker.io 18.09.5+dfsg1-1
 	- docker.io <unfixed>
+	[buster] - docker.io <no-dsa> (Minor issue)
 	NOTE: https://github.com/moby/moby/pull/38944
 CVE-2019-13138
 	RESERVED
@@ -11033,6 +11036,8 @@ CVE-2019-10207 [bluetooth: hci_uart: 0x0 address  execution as nonprivileged use
 CVE-2019-10206 [disclosure data when prompted for password and template characters are passed]
 	RESERVED
 	- ansible <unfixed>
+	[buster] - ansible <no-dsa> (Minor issue)
+	[stretch] - ansible <no-dsa> (Minor issue)
 	NOTE: https://github.com/ansible/ansible/pull/59246
 	NOTE: 2.8.x https://github.com/ansible/ansible/pull/59552
 	NOTE: 2.7.x https://github.com/ansible/ansible/pull/59553
@@ -177331,7 +177336,7 @@ CVE-2015-7899 (The com_content component in Joomla! 3.x before 3.4.5 does not pr
 CVE-2015-7883
 	RESERVED
 CVE-2015-7882 (Improper handling of LDAP authentication in MongoDB Server versions 3. ...)
-	TODO: check
+	- mongodb <not-affected> (Only affects Enterprise version)
 CVE-2015-7881 (The Colorbox module 7.x-2.x before 7.x-2.10 for Drupal allows remote a ...)
 	NOT-FOR-US: Colorbox module for Drupal
 CVE-2015-7880 (The Entity Registration module 7.x-1.x before 7.x-1.5 for Drupal allow ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/698e2f5c1d202f43b5c8ced35b1df0efd7b9ecbc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/698e2f5c1d202f43b5c8ced35b1df0efd7b9ecbc
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190725/43fd0f1c/attachment.html>