[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Apr 1 21:10:32 BST 2022 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ada94844 by security tracker role at 2022-04-01T20:10:23+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,43 @@
+CVE-2022-28341
+	RESERVED
+CVE-2022-28340
+	RESERVED
+CVE-2022-28339
+	RESERVED
+CVE-2022-28338
+	RESERVED
+CVE-2022-28337
+	RESERVED
+CVE-2022-28336
+	RESERVED
+CVE-2022-28335
+	RESERVED
+CVE-2022-28334
+	RESERVED
+CVE-2022-28333
+	RESERVED
+CVE-2022-28332
+	RESERVED
+CVE-2022-28331
+	RESERVED
+CVE-2022-28330
+	RESERVED
+CVE-2022-28329
+	RESERVED
+CVE-2022-28328
+	RESERVED
+CVE-2022-1206
+	RESERVED
+CVE-2022-1205
+	RESERVED
+CVE-2022-1204
+	RESERVED
+CVE-2022-1203
+	RESERVED
+CVE-2022-1202
+	RESERVED
+CVE-2022-1201
+	RESERVED
 CVE-2022-28327
 	RESERVED
 CVE-2022-28326
@@ -1464,6 +1504,7 @@ CVE-2022-1061 (Heap Buffer Overflow in parseDragons in GitHub repository radareo
 	NOTE: https://huntr.dev/bounties/a7546dae-01c5-4fb0-8a8e-c04ea4e9bac7
 	NOTE: https://github.com/radareorg/radare2/commit/d4ce40b516ffd70cf2e9e36832d8de139117d522
 CVE-2018-25032 (zlib before 1.2.12 allows memory corruption when deflating (i.e., when ...)
+	{DSA-5111-1}
 	- zlib 1:1.2.11.dfsg-4 (bug #1008265)
 	- libz-mingw-w64 1.2.11+dfsg-5
 	[bullseye] - libz-mingw-w64 <no-dsa> (Minor issue)
@@ -4678,8 +4719,8 @@ CVE-2022-26564
 	RESERVED
 CVE-2022-26563
 	RESERVED
-CVE-2022-26562
-	RESERVED
+CVE-2022-26562 (An issue in provider/libserver/ECKrbAuth.cpp of Kopano-Core v11.0.2.51 ...)
+	TODO: check
 CVE-2022-26561
 	RESERVED
 CVE-2022-26560
@@ -6511,8 +6552,8 @@ CVE-2022-24909
 	RESERVED
 CVE-2022-24441
 	RESERVED
-CVE-2022-24440
-	RESERVED
+CVE-2022-24440 (The package cocoapods-downloader before 1.6.0, from 1.6.2 and before 1 ...)
+	TODO: check
 CVE-2022-24439
 	RESERVED
 CVE-2022-24438
@@ -6577,8 +6618,8 @@ CVE-2022-21802
 	RESERVED
 CVE-2022-21797
 	RESERVED
-CVE-2022-21235
-	RESERVED
+CVE-2022-21235 (The package github.com/masterminds/vcs before 1.13.3 are vulnerable to ...)
+	TODO: check
 CVE-2022-21232
 	RESERVED
 CVE-2022-21231
@@ -6587,8 +6628,8 @@ CVE-2022-21230
 	RESERVED
 CVE-2022-21227
 	RESERVED
-CVE-2022-21223
-	RESERVED
+CVE-2022-21223 (The package cocoapods-downloader before 1.6.2 are vulnerable to Comman ...)
+	TODO: check
 CVE-2022-21222
 	RESERVED
 CVE-2022-21221 (The package github.com/valyala/fasthttp before 1.34.0 are vulnerable t ...)
@@ -11509,8 +11550,8 @@ CVE-2022-24183
 	RESERVED
 CVE-2022-24182
 	RESERVED
-CVE-2022-24181
-	RESERVED
+CVE-2022-24181 (Cross-site scripting (XSS) via Host Header injection in PKP Open Journ ...)
+	TODO: check
 CVE-2022-24180
 	RESERVED
 CVE-2022-24179
@@ -12971,8 +13012,8 @@ CVE-2021-46445 (H.H.G Multistore v5.1.0 and below was discovered to contain a SQ
 	NOT-FOR-US: H.H.G Multistore
 CVE-2021-46444 (H.H.G Multistore v5.1.0 and below was discovered to contain a SQL inje ...)
 	NOT-FOR-US: H.H.G Multistore
-CVE-2021-46443
-	RESERVED
+CVE-2021-46443 (Spoofer 1.4.6 suffers from unquoted service paths vulnerability. An at ...)
+	TODO: check
 CVE-2021-46442
 	RESERVED
 CVE-2021-46441
@@ -18058,8 +18099,8 @@ CVE-2022-22406
 	RESERVED
 CVE-2022-22405
 	RESERVED
-CVE-2022-22404
-	RESERVED
+CVE-2022-22404 (IBM App Connect Enterprise Certified Container Dashboard UI (IBM App C ...)
+	TODO: check
 CVE-2022-22403
 	RESERVED
 CVE-2022-22402
@@ -18202,18 +18243,18 @@ CVE-2022-22334
 	RESERVED
 CVE-2022-22333 (IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterli ...)
 	NOT-FOR-US: IBM
-CVE-2022-22332
-	RESERVED
-CVE-2022-22331
-	RESERVED
+CVE-2022-22332 (IBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker  ...)
+	TODO: check
+CVE-2022-22331 (IBM SterlingPartner Engagement Manager 6.2.0 could allow a remote auth ...)
+	TODO: check
 CVE-2022-22330
 	RESERVED
 CVE-2022-22329
 	RESERVED
-CVE-2022-22328
-	RESERVED
-CVE-2022-22327
-	RESERVED
+CVE-2022-22328 (IBM SterlingPartner Engagement Manager 6.2.0 could allow a malicious u ...)
+	TODO: check
+CVE-2022-22327 (IBM UrbanCode Deploy (UCD) 7.0.5, 7.1.0, 7.1.1, and 7.1.2 uses weaker  ...)
+	TODO: check
 CVE-2022-22326
 	RESERVED
 CVE-2022-22325
@@ -25199,8 +25240,8 @@ CVE-2021-44137
 	RESERVED
 CVE-2021-44136
 	RESERVED
-CVE-2021-44135
-	RESERVED
+CVE-2021-44135 (pagekit all versions, as of 15-10-2021, is vulnerable to SQL Injection ...)
+	TODO: check
 CVE-2021-44134
 	RESERVED
 CVE-2021-44133
@@ -47093,10 +47134,10 @@ CVE-2021-36778
 	RESERVED
 CVE-2021-36777 (A Reliance on Untrusted Inputs in a Security Decision vulnerability in ...)
 	NOT-FOR-US: OpenSuSE infrastructure
-CVE-2021-36776
-	RESERVED
-CVE-2021-36775
-	RESERVED
+CVE-2021-36776 (A Improper Access Control vulnerability in SUSE Rancher allows remote  ...)
+	TODO: check
+CVE-2021-36775 (a Improper Access Control vulnerability in SUSE Rancher allows users t ...)
+	TODO: check
 CVE-2021-3653 (A flaw was found in the KVM's AMD code for supporting SVM nested virtu ...)
 	{DSA-4978-1 DLA-2843-1 DLA-2785-1}
 	- linux 5.14.6-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ada94844529e6d13f5a449c05dec6ce95e719fa9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ada94844529e6d13f5a449c05dec6ce95e719fa9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220401/fd1bd832/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list