[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Aug 4 09:10:30 BST 2021 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b091d2b0 by security tracker role at 2021-08-04T08:10:21+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,319 @@
+CVE-2021-38088
+	RESERVED
+CVE-2021-38087
+	RESERVED
+CVE-2021-38086
+	RESERVED
+CVE-2021-38085
+	RESERVED
+CVE-2021-38084 (An issue was discovered in the POP3 component of Courier Mail Server b ...)
+	TODO: check
+CVE-2021-38083
+	RESERVED
+CVE-2021-38082
+	RESERVED
+CVE-2021-38081
+	RESERVED
+CVE-2021-38080
+	RESERVED
+CVE-2021-38079
+	RESERVED
+CVE-2021-38078
+	RESERVED
+CVE-2021-38077
+	RESERVED
+CVE-2021-38076
+	RESERVED
+CVE-2021-38075
+	RESERVED
+CVE-2021-38074
+	RESERVED
+CVE-2021-38073
+	RESERVED
+CVE-2021-38072
+	RESERVED
+CVE-2021-38071
+	RESERVED
+CVE-2021-38070
+	RESERVED
+CVE-2021-38069
+	RESERVED
+CVE-2021-38068
+	RESERVED
+CVE-2021-38067
+	RESERVED
+CVE-2021-38066
+	RESERVED
+CVE-2021-38065
+	RESERVED
+CVE-2021-38064
+	RESERVED
+CVE-2021-38063
+	RESERVED
+CVE-2021-38062
+	RESERVED
+CVE-2021-38061
+	RESERVED
+CVE-2021-38060
+	RESERVED
+CVE-2021-38059
+	RESERVED
+CVE-2021-38058
+	RESERVED
+CVE-2021-38057
+	RESERVED
+CVE-2021-38056
+	RESERVED
+CVE-2021-38055
+	RESERVED
+CVE-2021-38054
+	RESERVED
+CVE-2021-38053
+	RESERVED
+CVE-2021-38052
+	RESERVED
+CVE-2021-38051
+	RESERVED
+CVE-2021-38050
+	RESERVED
+CVE-2021-38049
+	RESERVED
+CVE-2021-38048
+	RESERVED
+CVE-2021-38047
+	RESERVED
+CVE-2021-38046
+	RESERVED
+CVE-2021-38045
+	RESERVED
+CVE-2021-38044
+	RESERVED
+CVE-2021-38043
+	RESERVED
+CVE-2021-38042
+	RESERVED
+CVE-2021-38041
+	RESERVED
+CVE-2021-38040
+	RESERVED
+CVE-2021-38039
+	RESERVED
+CVE-2021-38038
+	RESERVED
+CVE-2021-38037
+	RESERVED
+CVE-2021-38036
+	RESERVED
+CVE-2021-38035
+	RESERVED
+CVE-2021-38034
+	RESERVED
+CVE-2021-38033
+	RESERVED
+CVE-2021-38032
+	RESERVED
+CVE-2021-38031
+	RESERVED
+CVE-2021-38030
+	RESERVED
+CVE-2021-38029
+	RESERVED
+CVE-2021-38028
+	RESERVED
+CVE-2021-38027
+	RESERVED
+CVE-2021-38026
+	RESERVED
+CVE-2021-38025
+	RESERVED
+CVE-2021-38024
+	RESERVED
+CVE-2021-38023
+	RESERVED
+CVE-2021-38022
+	RESERVED
+CVE-2021-38021
+	RESERVED
+CVE-2021-38020
+	RESERVED
+CVE-2021-38019
+	RESERVED
+CVE-2021-38018
+	RESERVED
+CVE-2021-38017
+	RESERVED
+CVE-2021-38016
+	RESERVED
+CVE-2021-38015
+	RESERVED
+CVE-2021-38014
+	RESERVED
+CVE-2021-38013
+	RESERVED
+CVE-2021-38012
+	RESERVED
+CVE-2021-38011
+	RESERVED
+CVE-2021-38010
+	RESERVED
+CVE-2021-38009
+	RESERVED
+CVE-2021-38008
+	RESERVED
+CVE-2021-38007
+	RESERVED
+CVE-2021-38006
+	RESERVED
+CVE-2021-38005
+	RESERVED
+CVE-2021-38004
+	RESERVED
+CVE-2021-38003
+	RESERVED
+CVE-2021-38002
+	RESERVED
+CVE-2021-38001
+	RESERVED
+CVE-2021-38000
+	RESERVED
+CVE-2021-37999
+	RESERVED
+CVE-2021-37998
+	RESERVED
+CVE-2021-37997
+	RESERVED
+CVE-2021-37996
+	RESERVED
+CVE-2021-37995
+	RESERVED
+CVE-2021-37994
+	RESERVED
+CVE-2021-37993
+	RESERVED
+CVE-2021-37992
+	RESERVED
+CVE-2021-37991
+	RESERVED
+CVE-2021-37990
+	RESERVED
+CVE-2021-37989
+	RESERVED
+CVE-2021-37988
+	RESERVED
+CVE-2021-37987
+	RESERVED
+CVE-2021-37986
+	RESERVED
+CVE-2021-37985
+	RESERVED
+CVE-2021-37984
+	RESERVED
+CVE-2021-37983
+	RESERVED
+CVE-2021-37982
+	RESERVED
+CVE-2021-37981
+	RESERVED
+CVE-2021-37980
+	RESERVED
+CVE-2021-37979
+	RESERVED
+CVE-2021-37978
+	RESERVED
+CVE-2021-37977
+	RESERVED
+CVE-2021-37976
+	RESERVED
+CVE-2021-37975
+	RESERVED
+CVE-2021-37974
+	RESERVED
+CVE-2021-37973
+	RESERVED
+CVE-2021-37972
+	RESERVED
+CVE-2021-37971
+	RESERVED
+CVE-2021-37970
+	RESERVED
+CVE-2021-37969
+	RESERVED
+CVE-2021-37968
+	RESERVED
+CVE-2021-37967
+	RESERVED
+CVE-2021-37966
+	RESERVED
+CVE-2021-37965
+	RESERVED
+CVE-2021-37964
+	RESERVED
+CVE-2021-37963
+	RESERVED
+CVE-2021-37962
+	RESERVED
+CVE-2021-37961
+	RESERVED
+CVE-2021-37960
+	RESERVED
+CVE-2021-37959
+	RESERVED
+CVE-2021-37958
+	RESERVED
+CVE-2021-37957
+	RESERVED
+CVE-2021-37956
+	RESERVED
+CVE-2021-37955
+	RESERVED
+CVE-2021-37954
+	RESERVED
+CVE-2021-37953
+	RESERVED
+CVE-2021-37952
+	RESERVED
+CVE-2021-37951
+	RESERVED
+CVE-2021-37950
+	RESERVED
+CVE-2021-37949
+	RESERVED
+CVE-2021-37948
+	RESERVED
+CVE-2021-37947
+	RESERVED
+CVE-2021-37946
+	RESERVED
+CVE-2021-37945
+	RESERVED
+CVE-2021-37944
+	RESERVED
+CVE-2021-37943
+	RESERVED
+CVE-2021-37942
+	RESERVED
+CVE-2021-37941
+	RESERVED
+CVE-2021-37940
+	RESERVED
+CVE-2021-37939
+	RESERVED
+CVE-2021-37938
+	RESERVED
+CVE-2021-37937
+	RESERVED
+CVE-2021-37936
+	RESERVED
+CVE-2021-37935
+	RESERVED
+CVE-2021-37934
+	RESERVED
+CVE-2021-37933
+	RESERVED
+CVE-2021-37932
+	RESERVED
+CVE-2021-3681
+	RESERVED
 CVE-2021-3680
 	RESERVED
 CVE-2021-3679
@@ -8198,14 +8514,14 @@ CVE-2021-34275
 	RESERVED
 CVE-2021-34274
 	RESERVED
-CVE-2021-34273
-	RESERVED
-CVE-2021-34272
-	RESERVED
+CVE-2021-34273 (A security flaw in the 'owned' function of a smart contract implementa ...)
+	TODO: check
+CVE-2021-34272 (A security flaw in the 'owned' function of a smart contract implementa ...)
+	TODO: check
 CVE-2021-34271
 	RESERVED
-CVE-2021-34270
-	RESERVED
+CVE-2021-34270 (An integer overflow in the mintToken function of a smart contract impl ...)
+	TODO: check
 CVE-2021-34269
 	RESERVED
 CVE-2021-34268 (An issue in the USBH_ParseDevDesc() function of STMicroelectronics STM ...)
@@ -10215,8 +10531,8 @@ CVE-2021-33405
 	RESERVED
 CVE-2021-33404
 	RESERVED
-CVE-2021-33403
-	RESERVED
+CVE-2021-33403 (An integer overflow in the transfer function of a smart contract imple ...)
+	TODO: check
 CVE-2021-33402
 	RESERVED
 CVE-2021-33401
@@ -10351,16 +10667,16 @@ CVE-2021-33337
 	RESERVED
 CVE-2021-33336
 	RESERVED
-CVE-2021-33335
-	RESERVED
-CVE-2021-33334
-	RESERVED
-CVE-2021-33333
-	RESERVED
-CVE-2021-33332
-	RESERVED
-CVE-2021-33331
-	RESERVED
+CVE-2021-33335 (Privilege escalation vulnerability in Liferay Portal 7.0.3 through 7.3 ...)
+	TODO: check
+CVE-2021-33334 (The Dynamic Data Mapping module in Liferay Portal 7.0.0 through 7.3.2, ...)
+	TODO: check
+CVE-2021-33333 (The Portal Workflow module in Liferay Portal 7.3.2 and earlier, and Li ...)
+	TODO: check
+CVE-2021-33332 (Cross-site scripting (XSS) vulnerability in the Portlet Configuration  ...)
+	TODO: check
+CVE-2021-33331 (Open redirect vulnerability in the Notifications module in Liferay Por ...)
+	TODO: check
 CVE-2021-33330 (Liferay Portal 7.2.0 through 7.3.2, and Liferay DXP 7.2 before fix pac ...)
 	NOT-FOR-US: Liferay
 CVE-2021-33329
@@ -11579,8 +11895,8 @@ CVE-2021-32815
 	RESERVED
 CVE-2021-32814 (Skytable is a NoSQL database with automated snapshots and TLS. Version ...)
 	TODO: check
-CVE-2021-32813
-	RESERVED
+CVE-2021-32813 (Traefik is an HTTP reverse proxy and load balancer. Prior to version 2 ...)
+	TODO: check
 CVE-2021-32812 (Monkshu is an enterprise application server for mobile apps (iOS and A ...)
 	NOT-FOR-US: Monkshu
 CVE-2021-32811 (Zope is an open-source web application server. Zope versions prior to  ...)
@@ -11597,8 +11913,8 @@ CVE-2021-32806 (Products.isurlinportal is a replacement for isURLInPortal method
 	TODO: check
 CVE-2021-32805
 	RESERVED
-CVE-2021-32804
-	RESERVED
+CVE-2021-32804 (The npm package "tar" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4 ...)
+	TODO: check
 CVE-2021-32803 (The npm package "tar" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4 ...)
 	TODO: check
 CVE-2021-32802
@@ -17187,102 +17503,78 @@ CVE-2021-30590
 	RESERVED
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30589
-	RESERVED
+CVE-2021-30589 (Insufficient validation of untrusted input in Sharing in Google Chrome ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30588
-	RESERVED
+CVE-2021-30588 (Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30587
-	RESERVED
+CVE-2021-30587 (Inappropriate implementation in Compositing in Google Chrome prior to  ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30586
-	RESERVED
+CVE-2021-30586 (Use after free in dialog box handling in Windows in Google Chrome prio ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30585
-	RESERVED
+CVE-2021-30585 (Use after free in sensor handling in Google Chrome on Windows prior to ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30584
-	RESERVED
+CVE-2021-30584 (Incorrect security UI in Downloads in Google Chrome on Android prior t ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30583
-	RESERVED
+CVE-2021-30583 (Insufficient policy enforcement in image handling in iOS in Google Chr ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30582
-	RESERVED
+CVE-2021-30582 (Inappropriate implementation in Animation in Google Chrome prior to 92 ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30581
-	RESERVED
+CVE-2021-30581 (Use after free in DevTools in Google Chrome prior to 92.0.4515.107 all ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30580
-	RESERVED
+CVE-2021-30580 (Insufficient policy enforcement in Android intents in Google Chrome pr ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30579
-	RESERVED
+CVE-2021-30579 (Use after free in UI framework in Google Chrome prior to 92.0.4515.107 ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30578
-	RESERVED
+CVE-2021-30578 (Uninitialized use in Media in Google Chrome prior to 92.0.4515.107 all ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30577
-	RESERVED
+CVE-2021-30577 (Insufficient policy enforcement in Installer in Google Chrome prior to ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30576
-	RESERVED
+CVE-2021-30576 (Use after free in DevTools in Google Chrome prior to 92.0.4515.107 all ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30575
-	RESERVED
+CVE-2021-30575 (Out of bounds write in Autofill in Google Chrome prior to 92.0.4515.10 ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30574
-	RESERVED
+CVE-2021-30574 (Use after free in protocol handling in Google Chrome prior to 92.0.451 ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30573
-	RESERVED
+CVE-2021-30573 (Use after free in GPU in Google Chrome prior to 92.0.4515.107 allowed  ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30572
-	RESERVED
+CVE-2021-30572 (Use after free in Autofill in Google Chrome prior to 92.0.4515.107 all ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30571
-	RESERVED
+CVE-2021-30571 (Insufficient policy enforcement in DevTools in Google Chrome prior to  ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
 CVE-2021-30570
 	RESERVED
-CVE-2021-30569
-	RESERVED
+CVE-2021-30569 (Use after free in sqlite in Google Chrome prior to 92.0.4515.107 allow ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30568
-	RESERVED
+CVE-2021-30568 (Heap buffer overflow in WebGL in Google Chrome prior to 92.0.4515.107  ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30567
-	RESERVED
+CVE-2021-30567 (Use after free in DevTools in Google Chrome prior to 92.0.4515.107 all ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30566
-	RESERVED
+CVE-2021-30566 (Stack buffer overflow in Printing in Google Chrome prior to 92.0.4515. ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
-CVE-2021-30565
-	RESERVED
+CVE-2021-30565 (Out of bounds write in Tab Groups in Google Chrome on Linux and Chrome ...)
 	- chromium <unfixed>
 	[stretch] - chromium <end-of-life> (see DSA 4562)
 CVE-2021-30564 (Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164  ...)
@@ -73863,16 +74155,16 @@ CVE-2020-19307
 	RESERVED
 CVE-2020-19306
 	RESERVED
-CVE-2020-19305
-	RESERVED
-CVE-2020-19304
-	RESERVED
-CVE-2020-19303
-	RESERVED
-CVE-2020-19302
-	RESERVED
-CVE-2020-19301
-	RESERVED
+CVE-2020-19305 (An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 ...)
+	TODO: check
+CVE-2020-19304 (An issue in /admin/index.php?n=system&c=filept&a=doGetFileList ...)
+	TODO: check
+CVE-2020-19303 (An arbitrary file upload vulnerability in /fileupload.php of hdcms 5.7 ...)
+	TODO: check
+CVE-2020-19302 (An arbitrary file upload vulnerability in the avatar upload function o ...)
+	TODO: check
+CVE-2020-19301 (A vulnerability in the vae_admin_rule database table of vaeThink v1.0. ...)
+	TODO: check
 CVE-2020-19300
 	RESERVED
 CVE-2020-19299



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b091d2b0f53fbc73778d8dcf25363c8dfff51115

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b091d2b0f53fbc73778d8dcf25363c8dfff51115
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210804/1a9c89d1/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list