[Git][security-tracker-team/security-tracker][master] Add three new CVEs for linux
Salvatore Bonaccorso
carnil at debian.org
Thu Nov 21 08:21:58 GMT 2019
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
52b36a67 by Salvatore Bonaccorso at 2019-11-21T08:20:09Z
Add three new CVEs for linux
It is unclear if they are reported upstream or just reported by someone
to MITRE to get a CVE. Check further status first in kernel-sec.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -250,13 +250,13 @@ CVE-2019-19041 (An issue was discovered in Xorux Lpar2RRD 6.11 and Stor2RRD 2.61
CVE-2019-19040 (KairosDB through 1.2.2 has XSS in view.html because of showErrorMessag ...)
NOT-FOR-US: KairosDB
CVE-2019-19039 (__btrfs_free_extent in fs/btrfs/extent-tree.c in the Linux kernel thro ...)
- TODO: check
+ - linux <unfixed>
CVE-2019-19038
RESERVED
CVE-2019-19037 (ext4_empty_dir in fs/ext4/namei.c in the Linux kernel through 5.3.12 a ...)
- TODO: check
+ - linux <unfixed>
CVE-2019-19036 (btrfs_root_node in fs/btrfs/ctree.c in the Linux kernel through 5.3.12 ...)
- TODO: check
+ - linux <unfixed>
CVE-2019-19035 (jhead 3.03 is affected by: heap-based buffer over-read. The impact is: ...)
- jhead <unfixed> (unimportant; bug #944961)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1765647
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/52b36a6724a25a88540f6778dcf59b09187fe03d
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/52b36a6724a25a88540f6778dcf59b09187fe03d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191121/1673d2f5/attachment-0001.html>
More information about the debian-security-tracker-commits
mailing list