[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
carnil at debian.org
Mon Oct 7 09:10:31 BST 2019
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
978486f4 by security tracker role at 2019-10-07T08:10:18Z
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,65 @@
+CVE-2019-17271
+ RESERVED
+CVE-2019-17270
+ RESERVED
+CVE-2019-17269 (Intellian Remote Access 3.18 allows remote attackers to execute arbitr ...)
+ TODO: check
+CVE-2019-17268
+ RESERVED
+CVE-2019-17267 (A Polymorphic Typing issue was discovered in FasterXML jackson-databin ...)
+ TODO: check
+CVE-2019-17266 (libsoup through 2.68.1 has a heap-based buffer over-read because soup_ ...)
+ TODO: check
+CVE-2019-17265
+ RESERVED
+CVE-2019-17264 (In libyal liblnk before 20191006, liblnk_location_information_read_dat ...)
+ TODO: check
+CVE-2019-17263 (In libyal libfwsi before 20191006, libfwsi_extension_block_copy_from_b ...)
+ TODO: check
+CVE-2019-17262
+ RESERVED
+CVE-2019-17261
+ RESERVED
+CVE-2019-17260
+ RESERVED
+CVE-2019-17259
+ RESERVED
+CVE-2019-17258
+ RESERVED
+CVE-2019-17257
+ RESERVED
+CVE-2019-17256
+ RESERVED
+CVE-2019-17255
+ RESERVED
+CVE-2019-17254
+ RESERVED
+CVE-2019-17253
+ RESERVED
+CVE-2019-17252
+ RESERVED
+CVE-2019-17251
+ RESERVED
+CVE-2019-17250
+ RESERVED
+CVE-2019-17249
+ RESERVED
+CVE-2019-17248
+ RESERVED
+CVE-2019-17247
+ RESERVED
+CVE-2019-17246
+ RESERVED
+CVE-2019-17245
+ RESERVED
+CVE-2019-17244
+ RESERVED
+CVE-2019-17243
+ RESERVED
+CVE-2019-17242
+ RESERVED
+CVE-2019-17241
+ RESERVED
CVE-2019-17240 (bl-kernel/security.class.php in Bludit 3.9.2 allows attackers to bypas ...)
NOT-FOR-US: Bludit
CVE-2019-17239
@@ -12046,14 +12108,14 @@ CVE-2019-13377 (The implementations of SAE and EAP-pwd in hostapd and wpa_suppli
NOTE: "added support for Brainpool Elliptic Curves with SAE"
NOTE: Patches: https://w1.fi/security/2019-6/
CVE-2019-13376 (phpBB version 3.2.7 allows the stealing of an Administration Control P ...)
- {DLA-1942-1}
+ {DLA-1942-2 DLA-1942-1}
- phpbb3 <removed>
NOTE: https://ssd-disclosure.com/archives/4007/ssd-advisory-phpbb-csrf-token-hijacking-leading-to-stored-xss
NOTE: fixed in 3.2.8 as 'SECURITY-246'
NOTE: https://github.com/phpbb/phpbb/commit/cdf4f5ef85f05c0f94eae1a9edb1c28d4ac3515f
NOTE: follow-up to incomplete fix for CVE-2019-16993
CVE-2019-16993 (In phpBB before 3.1.7-PL1, includes/acp/acp_bbcodes.php has improper v ...)
- {DLA-1942-1}
+ {DLA-1942-2 DLA-1942-1}
- phpbb3 <removed>
NOTE: https://github.com/phpbb/phpbb/commit/18abef716ecf42a35416444f3f84f5459d573789
NOTE: https://www.phpbb.com/community/viewtopic.php?t=2352606
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/978486f468122e9629c23a245d557c76cf8a8915
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/978486f468122e9629c23a245d557c76cf8a8915
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191007/6d7cb805/attachment.html>
More information about the debian-security-tracker-commits
mailing list