[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
aa3a5915 by security tracker role at 2019-10-14T08:10:16Z
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,21 @@
+CVE-2019-17547 (In ImageMagick before 7.0.8-62, TraceBezier in MagickCore/draw.c has a ...)
+	TODO: check
+CVE-2019-17546 (tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0. ...)
+	TODO: check
+CVE-2019-17545 (GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ...)
+	TODO: check
+CVE-2019-17544 (libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over- ...)
+	TODO: check
+CVE-2019-17543 (LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (rela ...)
+	TODO: check
+CVE-2019-17542 (FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk ...)
+	TODO: check
+CVE-2019-17541 (ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo  ...)
+	TODO: check
+CVE-2019-17540 (ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPS ...)
+	TODO: check
+CVE-2019-17539 (In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NUL ...)
+	TODO: check
 CVE-2019-17538 (Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for fil ...)
 	TODO: check
 CVE-2019-17537 (Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for fil ...)
@@ -84,8 +102,8 @@ CVE-2019-17503 (An issue was discovered in Kirona Dynamic Resource Scheduling (D
 	NOT-FOR-US: Kirona Dynamic Resource Scheduling (DRS)
 CVE-2019-17502 (Hydra through 0.1.8 has a NULL pointer dereference and daemon crash wh ...)
 	TODO: check
-CVE-2019-17501
-	RESERVED
+CVE-2019-17501 (Centreon 19.04 allows attackers to execute arbitrary OS commands via t ...)
+	TODO: check
 CVE-2019-17500
 	RESERVED
 CVE-2019-17499 (The setter.xml component of the Common Gateway Interface on Compal CH7 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/aa3a5915cb12e7b1e2743d180526c0fe4c6aaef3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/aa3a5915cb12e7b1e2743d180526c0fe4c6aaef3
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191014/27db59c8/attachment.html>