[Git][security-tracker-team/security-tracker][master] new clamav issues

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5b430f84 by Moritz Muehlenhoff at 2020-05-14T17:34:46+02:00
new clamav issues
freeradius no-dsa

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -24774,7 +24774,10 @@ CVE-2020-3343
 CVE-2020-3342
 	RESERVED
 CVE-2020-3341 (A vulnerability in the PDF archive parsing module in Clam AntiVirus (C ...)
-	TODO: check
+	- clamav <unfixed>
+	[buster] - clamav <no-dsa> (ClamAV is updated via -updates)
+	[stretch] - clamav <no-dsa> (ClamAV is updated via -updates)
+	NOTE: https://blog.clamav.net/2020/05/clamav-01023-security-patch-released.html
 CVE-2020-3340
 	RESERVED
 CVE-2020-3339
@@ -24802,7 +24805,10 @@ CVE-2020-3329 (A vulnerability in role-based access control of Cisco Integrated
 CVE-2020-3328
 	RESERVED
 CVE-2020-3327 (A vulnerability in the ARJ archive parsing module in Clam AntiVirus (C ...)
-	TODO: check
+	- clamav <unfixed>
+	[buster] - clamav <no-dsa> (ClamAV is updated via -updates)
+	[stretch] - clamav <no-dsa> (ClamAV is updated via -updates)
+	NOTE: https://blog.clamav.net/2020/05/clamav-01023-security-patch-released.html
 CVE-2020-3326
 	RESERVED
 CVE-2020-3325
@@ -38616,6 +38622,8 @@ CVE-2019-17186 (/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007_
 	NOT-FOR-US: FiberHome HG2201T devices
 CVE-2019-17185 (In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global Op ...)
 	- freeradius 3.0.20+dfsg-1
+	[buster] - freeradius <no-dsa> (Minor issue)
+	[stretch] - freeradius <no-dsa> (Minor issue)
 	[jessie] - freeradius <not-affected> (Vulnerable code not present; EAP-pwd module introduced in later version)
 	NOTE: https://github.com/FreeRADIUS/freeradius-server/commit/6b522f8780813726799e6b8cf0f1f8e0ce2c8ebf
 CVE-2019-17184 (Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C ...)
@@ -51371,6 +51379,8 @@ CVE-2019-13457 (An issue was discovered in Open Ticket Request System (OTRS) 7.0
 	NOTE: https://otrs.com/release-notes/otrs-security-advisory-2019-11/
 CVE-2019-13456 (In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd h ...)
 	- freeradius 3.0.20+dfsg-1
+	[buster] - freeradius <no-dsa> (Minor issue)
+	[stretch] - freeradius <no-dsa> (Minor issue)
 	[jessie] - freeradius <not-affected> (Vulnerable code introduced later in version 3.0.0)
 	NOTE: https://github.com/FreeRADIUS/freeradius-server/commit/3ea2a5a026e73d81cd9a3e9bbd4300c433004bfa (release_3_0_20)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1737663



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5b430f840556ae30a8ca72ac70dcdb0401bce6be

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5b430f840556ae30a8ca72ac70dcdb0401bce6be
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200514/2a651ab5/attachment.html>