[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso carnil at debian.org
Sat Mar 9 20:10:39 GMT 2019


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7947aff1 by security tracker role at 2019-03-09T20:10:30Z
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,9 @@
+CVE-2019-9644
+	RESERVED
+CVE-2019-9643
+	RESERVED
+CVE-2019-9642
+	RESERVED
 CVE-2019-9636 (Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: ...)
 	- python3.7 <unfixed> (bug #924072)
 	- python3.6 <unfixed>
@@ -35,31 +41,36 @@ CVE-2019-1003029 (A sandbox bypass vulnerability exists in Jenkins Script Securi
 	NOT-FOR-US: Jenkins plugin
 CVE-2019-9634 (Go through 1.12 on Windows misuses certain LoadLibrary functionality, ...)
 	TODO: check
-CVE-2019-9637 [rename() across the device may allow unwanted access during processing]
+CVE-2019-9637 (An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and ...)
+	{DSA-4403-1}
 	- php7.3 7.3.3-1
 	- php7.0 <removed>
 	- php5 <removed>
 	NOTE: Fixed in 7.1.27, 7.2.16, 7.3.3
 	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=77630
-CVE-2019-9641 [Uninitialized read in exif_process_IFD_in_TIFF]
+CVE-2019-9641 (An issue was discovered in the EXIF component in PHP before 7.1.27, ...)
+	{DSA-4403-1}
 	- php7.3 7.3.3-1
 	- php7.0 <removed>
 	- php5 <removed>
 	NOTE: Fixed in 7.1.27, 7.2.16, 7.3.3
 	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=77509
-CVE-2019-9640 [Invalid Read on exif_process_SOFn]
+CVE-2019-9640 (An issue was discovered in the EXIF component in PHP before 7.1.27, ...)
+	{DSA-4403-1}
 	- php7.3 7.3.3-1
 	- php7.0 <removed>
 	- php5 <removed>
 	NOTE: Fixed in 7.1.27, 7.2.16, 7.3.3
 	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=77540
-CVE-2019-9639
+CVE-2019-9639 (An issue was discovered in the EXIF component in PHP before 7.1.27, ...)
+	{DSA-4403-1}
 	- php7.3 7.3.3-1
 	- php7.0 <removed>
 	- php5 <removed>
 	NOTE: Fixed in 7.1.27, 7.2.16, 7.3.3
 	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=77659
-CVE-2019-9638 [Uninitialized read in exif_process_IFD_in_MAKERNOTE / 77563]
+CVE-2019-9638 (An issue was discovered in the EXIF component in PHP before 7.1.27, ...)
+	{DSA-4403-1}
 	- php7.3 7.3.3-1
 	- php7.0 <removed>
 	- php5 <removed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7947aff1369722b84502bfb86b96704e88f6082b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7947aff1369722b84502bfb86b96704e88f6082b
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190309/154d3f25/attachment.html>


More information about the debian-security-tracker-commits mailing list