[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso carnil at debian.org
Fri Aug 14 09:10:25 BST 2020



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1648d365 by security tracker role at 2020-08-14T08:10:17+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,15 @@
+CVE-2020-24355
+	RESERVED
+CVE-2020-24354
+	RESERVED
+CVE-2020-24353
+	RESERVED
+CVE-2020-24352
+	RESERVED
+CVE-2020-24351
+	RESERVED
+CVE-2020-24350
+	RESERVED
 CVE-2020-24349 (njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_va ...)
 	TODO: check
 CVE-2020-24348 (njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_jso ...)
@@ -17225,7 +17237,7 @@ CVE-2020-15826 (In JetBrains TeamCity before 2020.1, users are able to assign mo
 	NOT-FOR-US: JetBrains TeamCity
 CVE-2020-15825 (In JetBrains TeamCity before 2020.1, users with the Modify Group permi ...)
 	NOT-FOR-US: JetBrains TeamCity
-CVE-2020-15824 (In JetBrains Kotlin before 1.4.0, there is a script-cache privilege es ...)
+CVE-2020-15824 (In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.70 is not aff ...)
 	- kotlin <itp> (bug #892842)
 CVE-2020-15823 (JetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in the Wor ...)
 	NOT-FOR-US: JetBrains YouTrack
@@ -40162,8 +40174,8 @@ CVE-2019-20385 (The CSV upload feature in /supervisor/procesa_carga.php on Logar
 	NOT-FOR-US: Logaritmo Aware CallManager 2012 devices
 CVE-2019-20384 (Gentoo Portage through 2.3.84 allows local users to place a Trojan hor ...)
 	NOT-FOR-US: Portage
-CVE-2019-20383
-	RESERVED
+CVE-2019-20383 (ABBYY network license server in ABBYY FineReader 15 before Release 4 ( ...)
+	TODO: check
 CVE-2019-20382 (QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle. ...)
 	{DSA-4665-1 DLA-2288-1}
 	- qemu 1:4.2-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1648d365035fc7dd3ce67ab723c736207c224297

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1648d365035fc7dd3ce67ab723c736207c224297
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200814/63a14510/attachment.html>


More information about the debian-security-tracker-commits mailing list