[Git][security-tracker-team/security-tracker][master] 3 commits: Add CVE-2019-19126/glibc

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8d800259 by Salvatore Bonaccorso at 2019-11-20T08:36:47Z
Add CVE-2019-19126/glibc

- - - - -
033b5439 by Salvatore Bonaccorso at 2019-11-20T08:38:18Z
Merge remote-tracking branch 'origin/master'

- - - - -
5616aa20 by Salvatore Bonaccorso at 2019-11-20T08:40:49Z
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,6 +3,7 @@ CVE-2019-19126 (On the x86-64 architecture, the GNU C Library (aka glibc) before
 	[buster] - glibc <no-dsa> (Minor issue)
 	[stretch] - glibc <no-dsa> (Minor issue)
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=25204
+	NOTE: https://sourceware.org/ml/libc-alpha/2019-11/msg00649.html
 CVE-2019-19125
 	RESERVED
 CVE-2019-19124
@@ -13889,11 +13890,11 @@ CVE-2019-15074 (The Timeline feature in my_view_page.php in MantisBT through 2.2
 	NOTE: https://github.com/mantisbt/mantisbt/commit/9cee1971c498bbe0a72bca1c773fae50171d8c27
 	NOTE: https://mantisbt.org/bugs/view.php?id=25995
 CVE-2019-15073 (An Open Redirect vulnerability for all browsers in MAIL2000 through ve ...)
-	TODO: check
+	NOT-FOR-US: Openfind MAIL2000
 CVE-2019-15072 (The login feature in "/cgi-bin/portal" in MAIL2000 through version 6.0 ...)
-	TODO: check
+	NOT-FOR-US: Openfind MAIL2000
 CVE-2019-15071 (The "/cgi-bin/go" page in MAIL2000 through version 6.0 and 7.0 has a c ...)
-	TODO: check
+	NOT-FOR-US: Openfind MAIL2000
 CVE-2019-15070
 	RESERVED
 CVE-2019-15069 (An unsafe authentication interface was discovered in Smart Battery A4, ...)
@@ -40688,17 +40689,17 @@ CVE-2019-6191 (A potential vulnerability in the discontinued LenovoPaper softwar
 CVE-2019-6190
 	RESERVED
 CVE-2019-6189 (A potential vulnerability was reported in Lenovo System Interface Foun ...)
-	TODO: check
+	NOT-FOR-US: Lenovo
 CVE-2019-6188 (The BIOS tamper detection mechanism was not triggered in Lenovo ThinkP ...)
 	NOT-FOR-US: Lenovo
 CVE-2019-6187 (A stored CSV Injection vulnerability was reported in Lenovo XClarity C ...)
-	TODO: check
+	NOT-FOR-US: Lenovo
 CVE-2019-6186 (A potential vulnerability was reported in Lenovo System Interface Foun ...)
-	TODO: check
+	NOT-FOR-US: Lenovo
 CVE-2019-6185
 	RESERVED
 CVE-2019-6184 (A potential vulnerability in the discontinued Customer Engagement Serv ...)
-	TODO: check
+	NOT-FOR-US: Lenovo
 CVE-2019-6183
 	RESERVED
 CVE-2019-6182 (A stored CSV Injection vulnerability was reported in Lenovo XClarity A ...)
@@ -40714,7 +40715,7 @@ CVE-2019-6178 (An information leakage vulnerability in Iomega and LenovoEMC NAS
 CVE-2019-6177 (A vulnerability reported in Lenovo Solution Center version 03.12.003,  ...)
 	NOT-FOR-US: Lenovo
 CVE-2019-6176 (A potential vulnerability reported in ThinkPad USB-C Dock Firmware ver ...)
-	TODO: check
+	NOT-FOR-US: Lenovo
 CVE-2019-6175 (A denial of service vulnerability was reported in Lenovo System Update ...)
 	NOT-FOR-US: Lenovo
 CVE-2019-6174



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/ee6d6d80077715afd164e3af3911051af8cfb961...5616aa2090a60760447f07786f1be79b4886e38c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/ee6d6d80077715afd164e3af3911051af8cfb961...5616aa2090a60760447f07786f1be79b4886e38c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191120/c7165e4a/attachment.html>