[Git][security-tracker-team/security-tracker][master] Add links to the upstream bug reports for ezxml

Anton Gladky (@gladk) gladk at debian.org
Wed Jul 7 20:35:05 BST 2021



Anton Gladky pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b5bef810 by Anton Gladky at 2021-07-07T21:30:03+02:00
Add links to the upstream bug reports for ezxml

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10717,6 +10717,7 @@ CVE-2021-31598 (An issue was discovered in libezxml.a in ezXML 0.8.6. The functi
 	- netcdf-parallel <unfixed> (bug #989361)
 	[bullseye] - netcdf-parallel <no-dsa> (Minor issue)
 	[buster] - netcdf-parallel <no-dsa> (Minor issue)
+	NOTE: https://sourceforge.net/p/ezxml/bugs/28/
 CVE-2021-31597 (The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL c ...)
 	- node-xmlhttprequest-ssl <unfixed>
 	[buster] - node-xmlhttprequest-ssl <ignored> (Minor issue, should possibly be removed from stable as well)
@@ -11357,6 +11358,7 @@ CVE-2021-31348 (An issue was discovered in libezxml.a in ezXML 0.8.6. The functi
 	- netcdf-parallel <unfixed> (bug #989361)
 	[bullseye] - netcdf-parallel <no-dsa> (Minor issue)
 	[buster] - netcdf-parallel <no-dsa> (Minor issue)
+	NOTE: https://sourceforge.net/p/ezxml/bugs/27/
 CVE-2021-31347 (An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezx ...)
 	- mapcache <unfixed> (bug #989363)
 	[bullseye] - mapcache <no-dsa> (Minor issue)
@@ -11373,6 +11375,7 @@ CVE-2021-31347 (An issue was discovered in libezxml.a in ezXML 0.8.6. The functi
 	- netcdf-parallel <unfixed> (bug #989361)
 	[bullseye] - netcdf-parallel <no-dsa> (Minor issue)
 	[buster] - netcdf-parallel <no-dsa> (Minor issue)
+	NOTE: https://sourceforge.net/p/ezxml/bugs/27/
 CVE-2021-31346
 	RESERVED
 CVE-2021-31345
@@ -11658,6 +11661,7 @@ CVE-2021-31229 (An issue was discovered in libezxml.a in ezXML 0.8.6. The functi
 	- netcdf-parallel <unfixed> (bug #989361)
 	[bullseye] - netcdf-parallel <no-dsa> (Minor issue)
 	[buster] - netcdf-parallel <no-dsa> (Minor issue)
+	NOTE: https://sourceforge.net/p/ezxml/bugs/26/
 CVE-2021-31228
 	RESERVED
 CVE-2021-31227
@@ -13399,6 +13403,7 @@ CVE-2021-30485 (An issue was discovered in libezxml.a in ezXML 0.8.6. The functi
 	- netcdf-parallel <unfixed> (bug #989361)
 	[bullseye] - netcdf-parallel <no-dsa> (Minor issue)
 	[buster] - netcdf-parallel <no-dsa> (Minor issue)
+	NOTE: https://sourceforge.net/p/ezxml/bugs/25
 CVE-2021-30484
 	RESERVED
 CVE-2021-30483
@@ -23851,6 +23856,7 @@ CVE-2021-26222 (The ezxml_new function in ezXML 0.8.6 and earlier is vulnerable
 	- netcdf-parallel <unfixed> (bug #989361)
 	[bullseye] - netcdf-parallel <no-dsa> (Minor issue)
 	[buster] - netcdf-parallel <no-dsa> (Minor issue)
+	NOTE: https://sourceforge.net/p/ezxml/bugs/22/
 CVE-2021-26221 (The ezxml_new function in ezXML 0.8.6 and earlier is vulnerable to OOB ...)
 	- mapcache <unfixed> (bug #989363)
 	[bullseye] - mapcache <no-dsa> (Minor issue)
@@ -23867,6 +23873,7 @@ CVE-2021-26221 (The ezxml_new function in ezXML 0.8.6 and earlier is vulnerable
 	- netcdf-parallel <unfixed> (bug #989361)
 	[bullseye] - netcdf-parallel <no-dsa> (Minor issue)
 	[buster] - netcdf-parallel <no-dsa> (Minor issue)
+	NOTE: https://sourceforge.net/p/ezxml/bugs/21/
 CVE-2021-26220 (The ezxml_toxml function in ezxml 0.8.6 and earlier is vulnerable to O ...)
 	- mapcache <unfixed> (bug #989363)
 	[bullseye] - mapcache <no-dsa> (Minor issue)
@@ -23883,6 +23890,7 @@ CVE-2021-26220 (The ezxml_toxml function in ezxml 0.8.6 and earlier is vulnerabl
 	- netcdf-parallel <unfixed> (bug #989361)
 	[bullseye] - netcdf-parallel <no-dsa> (Minor issue)
 	[buster] - netcdf-parallel <no-dsa> (Minor issue)
+	NOTE: https://sourceforge.net/p/ezxml/bugs/223/
 CVE-2021-26219
 	RESERVED
 CVE-2021-26218
@@ -106540,6 +106548,7 @@ CVE-2019-20202 (An issue was discovered in ezXML 0.8.3 through 0.8.6. The functi
 	- netcdf-parallel <unfixed> (bug #989361)
 	[bullseye] - netcdf-parallel <no-dsa> (Minor issue)
 	[buster] - netcdf-parallel <no-dsa> (Minor issue)
+	NOTE: https://sourceforge.net/p/ezxml/bugs/17/
 CVE-2019-20201 (An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxml_parse_ ...)
 	- mapcache <unfixed> (bug #989363)
 	[bullseye] - mapcache <no-dsa> (Minor issue)
@@ -106556,6 +106565,7 @@ CVE-2019-20201 (An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxml_
 	- netcdf-parallel <unfixed> (bug #989361)
 	[bullseye] - netcdf-parallel <no-dsa> (Minor issue)
 	[buster] - netcdf-parallel <no-dsa> (Minor issue)
+	NOTE: https://sourceforge.net/p/ezxml/bugs/16/
 CVE-2019-20200 (An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezx ...)
 	- mapcache <unfixed> (bug #989363)
 	[bullseye] - mapcache <no-dsa> (Minor issue)
@@ -106572,6 +106582,7 @@ CVE-2019-20200 (An issue was discovered in ezXML 0.8.3 through 0.8.6. The functi
 	- netcdf-parallel <unfixed> (bug #989361)
 	[bullseye] - netcdf-parallel <no-dsa> (Minor issue)
 	[buster] - netcdf-parallel <no-dsa> (Minor issue)
+	NOTE: https://sourceforge.net/p/ezxml/bugs/19/
 CVE-2019-20199 (An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezx ...)
 	- mapcache <unfixed> (bug #989363)
 	[bullseye] - mapcache <no-dsa> (Minor issue)
@@ -106588,6 +106599,7 @@ CVE-2019-20199 (An issue was discovered in ezXML 0.8.3 through 0.8.6. The functi
 	- netcdf-parallel <unfixed> (bug #989361)
 	[bullseye] - netcdf-parallel <no-dsa> (Minor issue)
 	[buster] - netcdf-parallel <no-dsa> (Minor issue)
+	NOTE: https://sourceforge.net/p/ezxml/bugs/18/
 CVE-2019-20198 (An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezx ...)
 	- mapcache <unfixed> (bug #989363)
 	[bullseye] - mapcache <no-dsa> (Minor issue)
@@ -106604,6 +106616,7 @@ CVE-2019-20198 (An issue was discovered in ezXML 0.8.3 through 0.8.6. The functi
 	- netcdf-parallel <unfixed> (bug #989361)
 	[bullseye] - netcdf-parallel <no-dsa> (Minor issue)
 	[buster] - netcdf-parallel <no-dsa> (Minor issue)
+	NOTE: https://sourceforge.net/p/ezxml/bugs/20/
 CVE-2020-5178
 	RESERVED
 CVE-2020-5177
@@ -109683,6 +109696,7 @@ CVE-2019-20007 (An issue was discovered in ezXML 0.8.2 through 0.8.6. The functi
 	- netcdf-parallel <unfixed> (bug #989361)
 	[bullseye] - netcdf-parallel <no-dsa> (Minor issue)
 	[buster] - netcdf-parallel <no-dsa> (Minor issue)
+	NOTE: https://sourceforge.net/p/ezxml/bugs/13/
 CVE-2019-20006 (An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezx ...)
 	- mapcache <unfixed> (bug #989363)
 	[bullseye] - mapcache <no-dsa> (Minor issue)
@@ -109699,6 +109713,7 @@ CVE-2019-20006 (An issue was discovered in ezXML 0.8.3 through 0.8.6. The functi
 	- netcdf-parallel <unfixed> (bug #989361)
 	[bullseye] - netcdf-parallel <no-dsa> (Minor issue)
 	[buster] - netcdf-parallel <no-dsa> (Minor issue)
+	NOTE: https://sourceforge.net/p/ezxml/bugs/15/
 CVE-2019-20005 (An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezx ...)
 	- mapcache <unfixed> (bug #989363)
 	[bullseye] - mapcache <no-dsa> (Minor issue)
@@ -109715,6 +109730,7 @@ CVE-2019-20005 (An issue was discovered in ezXML 0.8.3 through 0.8.6. The functi
 	- netcdf-parallel <unfixed> (bug #989361)
 	[bullseye] - netcdf-parallel <no-dsa> (Minor issue)
 	[buster] - netcdf-parallel <no-dsa> (Minor issue)
+	NOTE: https://sourceforge.net/p/ezxml/bugs/14/
 CVE-2019-20004 (An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. When the ...)
 	NOT-FOR-US: Intelbras
 CVE-2019-20003 (Feldtech easescreen Crystal 9.0 Web-Services 9.0.1.16265 allows Stored ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b5bef810d598e6b22c36bc98607072d0e3814f18

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b5bef810d598e6b22c36bc98607072d0e3814f18
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210707/090cdc12/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list