[Git][security-tracker-team/security-tracker][master] Add CVE-2019-1487{1,2,3,4,5,6,7,8}/newlib

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e6e1174e by Salvatore Bonaccorso at 2020-02-01T17:31:39+01:00
Add CVE-2019-1487{1,2,3,4,5,6,7,8}/newlib

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -32556,20 +32556,60 @@ CVE-2019-14879 (moodle before versions 3.7.3, 3.6.7, 3.5.9 is vulnerable to a No
 	- moodle <removed>
 CVE-2019-14878
 	RESERVED
+	- newlib <unfixed>
+	[buster] - newlib <no-dsa> (Minor issue)
+	[stretch] - newlib <no-dsa> (Minor issue)
+	NOTE: https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
+	TODO: picolibc might be affected, not yet in the archive
 CVE-2019-14877
 	RESERVED
+	- newlib <unfixed>
+	[buster] - newlib <no-dsa> (Minor issue)
+	[stretch] - newlib <no-dsa> (Minor issue)
+	NOTE: https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
+	TODO: picolibc might be affected, not yet in the archive
 CVE-2019-14876
 	RESERVED
+	- newlib <unfixed>
+	[buster] - newlib <no-dsa> (Minor issue)
+	[stretch] - newlib <no-dsa> (Minor issue)
+	NOTE: https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
+	TODO: picolibc might be affected, not yet in the archive
 CVE-2019-14875
 	RESERVED
+	- newlib <unfixed>
+	[buster] - newlib <no-dsa> (Minor issue)
+	[stretch] - newlib <no-dsa> (Minor issue)
+	NOTE: https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
+	TODO: picolibc might be affected, not yet in the archive
 CVE-2019-14874
 	RESERVED
+	- newlib <unfixed>
+	[buster] - newlib <no-dsa> (Minor issue)
+	[stretch] - newlib <no-dsa> (Minor issue)
+	NOTE: https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
+	TODO: picolibc might be affected, not yet in the archive
 CVE-2019-14873
 	RESERVED
+	- newlib <unfixed>
+	[buster] - newlib <no-dsa> (Minor issue)
+	[stretch] - newlib <no-dsa> (Minor issue)
+	NOTE: https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
+	TODO: picolibc might be affected, not yet in the archive
 CVE-2019-14872
 	RESERVED
+	- newlib <unfixed>
+	[buster] - newlib <no-dsa> (Minor issue)
+	[stretch] - newlib <no-dsa> (Minor issue)
+	NOTE: https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
+	TODO: picolibc might be affected, not yet in the archive
 CVE-2019-14871
 	RESERVED
+	- newlib <unfixed>
+	[buster] - newlib <no-dsa> (Minor issue)
+	[stretch] - newlib <no-dsa> (Minor issue)
+	NOTE: https://census-labs.com/news/2020/01/31/multiple-null-pointer-dereference-vulnerabilities-in-newlib/
+	TODO: picolibc might be affected, not yet in the archive
 CVE-2019-14870 (All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11 ...)
 	- samba 2:4.11.3+dfsg-1
 	[buster] - samba <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e6e1174e9cf6b9080435371bc993b5427d16d7c7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e6e1174e9cf6b9080435371bc993b5427d16d7c7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200201/a6bf52a2/attachment.html>