[Git][security-tracker-team/security-tracker][master] Add Debian tracking bug for CVE-2019-14540 and CVE-2019-16335

Salvatore Bonaccorso carnil at debian.org
Mon Sep 16 14:31:29 BST 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7c276f89 by Salvatore Bonaccorso at 2019-09-16T13:31:17Z
Add Debian tracking bug for CVE-2019-14540 and CVE-2019-16335

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13,7 +13,7 @@ CVE-2019-16337
 CVE-2019-16336
 	RESERVED
 CVE-2019-16335 (A Polymorphic Typing issue was discovered in FasterXML jackson-databin ...)
-	- jackson-databind <unfixed>
+	- jackson-databind <unfixed> (bug #940498)
 	NOTE: https://github.com/FasterXML/jackson-databind/issues/2449
 	NOTE: https://github.com/FasterXML/jackson-databind/commit/73c1c2cc76e6cdd7f3a5615cbe3207fe96e4d3db
 CVE-2019-16334 (In Bludit v3.9.2, there is a persistent XSS vulnerability in the Categ ...)
@@ -5112,7 +5112,7 @@ CVE-2019-14541 (GnuCOBOL 2.2 has a stack-based buffer overflow in cb_encode_prog
 	[jessie] - open-cobol <no-dsa> (Minor issue)
 	NOTE: https://sourceforge.net/p/open-cobol/bugs/584/
 CVE-2019-14540 (A Polymorphic Typing issue was discovered in FasterXML jackson-databin ...)
-	- jackson-databind <unfixed>
+	- jackson-databind <unfixed> (bug #940498)
 	NOTE: https://github.com/FasterXML/jackson-databind/issues/2410
 	NOTE: https://github.com/FasterXML/jackson-databind/issues/2449
 	NOTE: https://github.com/FasterXML/jackson-databind/commit/d4983c740fec7d5576b207a8c30a63d3ea7443de



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7c276f89617ee6cd7e2a37478720be5f255e1810

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7c276f89617ee6cd7e2a37478720be5f255e1810
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190916/91f4732f/attachment.html>


More information about the debian-security-tracker-commits mailing list