[Git][security-tracker-team/security-tracker][master] 2 commits: Process some NFUs

Salvatore Bonaccorso carnil at debian.org
Wed Apr 8 21:31:53 BST 2020 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
95714648 by Salvatore Bonaccorso at 2020-04-08T22:24:58+02:00
Process some NFUs

- - - - -
671be1be by Salvatore Bonaccorso at 2020-04-08T22:31:00+02:00
Add CVE-2019-20636/linux

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19,7 +19,10 @@ CVE-2020-11638
 CVE-2020-11637
 	RESERVED
 CVE-2019-20636 (In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bo ...)
-	TODO: check
+	- linux 5.4.13-1
+	[buster] - linux 4.19.98-1
+	[stretch] - linux 4.9.210-1
+	NOTE: https://git.kernel.org/linus/cb222aed03d798fc074be55e59d9a112338ee784
 CVE-2020-11636
 	RESERVED
 CVE-2020-11635
@@ -93,131 +96,131 @@ CVE-2020-11608 (An issue was discovered in the Linux kernel before 5.6.1. driver
 	- linux <unfixed>
 	NOTE: https://git.kernel.org/linus/998912346c0da53a6dbb71fab3a138586b596b30
 CVE-2020-11607 (An issue was discovered on Samsung mobile devices with P(9.0) and Q(10 ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2020-11606 (An issue was discovered on Samsung mobile devices with Q(10.0) softwar ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2020-11605 (An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2020-11604 (An issue was discovered on Samsung mobile devices with P(9.0) and Q(10 ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2020-11603 (An issue was discovered on Samsung mobile devices with P(9.0) and Q(10 ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2020-11602 (An issue was discovered on Samsung mobile devices with P(9.0) and Q(10 ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2020-11601 (An issue was discovered on Samsung mobile devices with P(9.0) and Q(10 ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2020-11600 (An issue was discovered on Samsung mobile devices with Q(10.0) softwar ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21092 (An issue was discovered on Samsung mobile devices with M(6.x) and N(7. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21091 (An issue was discovered on Samsung mobile devices with M(6.x) and N(7. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21090 (An issue was discovered on Samsung mobile devices with software throug ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21089 (An issue was discovered on Samsung mobile devices with N(7.x) (MT6755/ ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21088 (An issue was discovered on Samsung mobile devices with N(7.x) software ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21087 (An issue was discovered on Samsung mobile devices with L(5.x), M(6.x), ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21086 (An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21085 (An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21084 (An issue was discovered on Samsung mobile devices with L(5.1), M(6.0), ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21083 (An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21082 (An issue was discovered on Samsung mobile devices with N(7.x) software ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21081 (An issue was discovered on Samsung mobile devices with N(7.x) software ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21080 (An issue was discovered on Samsung mobile devices with N(7.x) software ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21079 (An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21078 (An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21077 (An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21076 (An issue was discovered on Samsung mobile devices with N(7.x) (Exynos8 ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21075 (An issue was discovered on Samsung mobile devices with N(7.x) and O(8. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21074 (An issue was discovered on Samsung mobile devices with M(6.x) (Exynos  ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21073 (An issue was discovered on Samsung mobile devices with N(7.x) and O(8. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21072 (An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21071 (An issue was discovered on Samsung mobile devices with M(6.0) software ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21070 (An issue was discovered on Samsung mobile devices with N(7.x), O(8.0)  ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21069 (An issue was discovered on Samsung mobile devices with N(7.x) (MediaTe ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21068 (An issue was discovered on Samsung mobile devices with O(8.0) software ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21067 (An issue was discovered on Samsung mobile devices with M(6.0) software ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21066 (An issue was discovered on Samsung mobile devices with M(6.0) (Exynos  ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21065 (An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21064 (An issue was discovered on Samsung mobile devices with N(7.x) and O(8. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21063 (An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21062 (An issue was discovered on Samsung mobile devices with N(7.x) and O(8. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21061 (An issue was discovered on Samsung mobile devices with N(7.1) and O(8. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21060 (An issue was discovered on Samsung mobile devices with N(7.x) and O(8. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21059 (An issue was discovered on Samsung mobile devices with N(7.x) and O(8. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21058 (An issue was discovered on Samsung mobile devices with N(7.0), O(8.0)  ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21057 (An issue was discovered on Samsung mobile devices with N(7.x) O(8.x, a ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21056 (An issue was discovered on Samsung mobile devices with O(8.x) software ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21055 (An issue was discovered on Samsung mobile devices with N(7.0) (Qualcom ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21054 (An issue was discovered on Samsung mobile devices with M(6.0), N(7.x)  ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21053 (An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21052 (An issue was discovered on Samsung mobile devices with N(7.x) and O(8. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21051 (An issue was discovered on Samsung mobile devices with N(7.x) and O(8. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21050 (An issue was discovered on Samsung mobile devices with N(7.x) and O(8. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21049 (An issue was discovered on Samsung mobile devices with N(7.x) and O(8. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21048 (An issue was discovered on Samsung mobile devices with O(8.x) software ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21047 (An issue was discovered on Samsung mobile devices with O(8.x) software ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21046 (An issue was discovered on Samsung mobile devices with O(8.x) software ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21045 (An issue was discovered on Samsung mobile devices with N(7.x) and O(8. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21044 (An issue was discovered on Samsung mobile devices with N(7.x) and O(8. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21043 (An issue was discovered on Samsung mobile devices with O(8.x) and P(9. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21042 (An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21041 (An issue was discovered on Samsung mobile devices with O(8.x) software ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21040 (An issue was discovered on Samsung mobile devices with O(8.x) and P(9. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21039 (An issue was discovered on Samsung mobile devices with N(7.0) software ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2018-21038 (An issue was discovered on Samsung mobile devices with N(7.x) software ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2017-18696 (An issue was discovered on Samsung mobile devices with M(6.0) and N(7. ...)
 	NOT-FOR-US: Samsung mobile devices
 CVE-2017-18695 (An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/ ...)
@@ -319,13 +322,13 @@ CVE-2017-18648 (An issue was discovered on Samsung mobile devices with KK(4.4.x)
 CVE-2017-18647 (An issue was discovered on Samsung mobile devices with M(6,x) and N(7. ...)
 	NOT-FOR-US: Samsung mobile devices
 CVE-2017-18646 (An issue was discovered on Samsung mobile devices with M(6.x) and N(7. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2017-18645 (An issue was discovered on Samsung mobile devices with M(6.x) and N(7. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2017-18644 (An issue was discovered on Samsung mobile devices with L(5.1), M(6.x), ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2017-18643 (An issue was discovered on Samsung mobile devices with M(6.x) and N(7. ...)
-	TODO: check
+	NOT-FOR-US: Samsung mobile devices
 CVE-2016-11053 (An issue was discovered on Samsung mobile devices with software throug ...)
 	NOT-FOR-US: Samsung mobile devices
 CVE-2016-11052 (An issue was discovered on Samsung mobile devices with L(5.0/5.1) soft ...)
@@ -17592,11 +17595,11 @@ CVE-2020-4293
 CVE-2020-4292 (IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and  ...)
 	NOT-FOR-US: IBM
 CVE-2020-4291 (IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0. ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2020-4290 (IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0. ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2020-4289 (IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0. ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2020-4288
 	RESERVED
 CVE-2020-4287
@@ -17606,11 +17609,11 @@ CVE-2020-4286
 CVE-2020-4285
 	RESERVED
 CVE-2020-4284 (IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0. ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2020-4283 (IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and  ...)
 	NOT-FOR-US: IBM
 CVE-2020-4282 (IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0. ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2020-4281
 	RESERVED
 CVE-2020-4280
@@ -17670,7 +17673,7 @@ CVE-2020-4254
 CVE-2020-4253 (IBM Content Navigator 3.0CD does not invalidate session after logout w ...)
 	NOT-FOR-US: IBM
 CVE-2020-4252 (IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulner ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2020-4251
 	RESERVED
 CVE-2020-4250
@@ -17846,7 +17849,7 @@ CVE-2020-4166
 CVE-2020-4165
 	RESERVED
 CVE-2020-4164 (IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0. ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2020-4163 (IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under special ...)
 	NOT-FOR-US: IBM
 CVE-2020-4162 (IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to cross ...)
@@ -71337,7 +71340,7 @@ CVE-2019-4748
 CVE-2019-4747
 	RESERVED
 CVE-2019-4746 (IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulner ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4745 (IBM Maximo Asset Management 7.6.1.0 could allow a remote attacker to d ...)
 	NOT-FOR-US: IBM
 CVE-2019-4744 (IBM Financial Transaction Manager 3.0 is vulnerable to cross-site scri ...)
@@ -71349,13 +71352,13 @@ CVE-2019-4742 (IBM Financial Transaction Manager 3.0 could allow a remote attack
 CVE-2019-4741 (IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forge ...)
 	NOT-FOR-US: IBM
 CVE-2019-4740 (IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulner ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4739
 	RESERVED
 CVE-2019-4738
 	RESERVED
 CVE-2019-4737 (IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulner ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4736 (IBM Financial Transaction Manager 3.0 is vulnerable to cross-site requ ...)
 	NOT-FOR-US: IBM
 CVE-2019-4735
@@ -71623,11 +71626,11 @@ CVE-2019-4605
 CVE-2019-4604
 	RESERVED
 CVE-2019-4603 (IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authe ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4602 (IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 is vulnerable to cro ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4601 (IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authe ...)
-	TODO: check
+	NOT-FOR-US: IBM
 CVE-2019-4600 (IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitiv ...)
 	NOT-FOR-US: IBM
 CVE-2019-4599



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/71441c1de2a5997ed787d5c55be883542a0346a3...671be1be16d6f528e4b9725f278de7beb3920ada

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/71441c1de2a5997ed787d5c55be883542a0346a3...671be1be16d6f528e4b9725f278de7beb3920ada
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200408/6f767d06/attachment-0001.html>

More information about the debian-security-tracker-commits mailing list