[Git][security-tracker-team/security-tracker][master] Expand some OTFCC TODOs

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6180ad5d by Salvatore Bonaccorso at 2022-08-17T22:15:47+02:00
Expand some OTFCC TODOs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7286,85 +7286,85 @@ CVE-2022-35488 (In Zammad 5.2.0, an attacker could manipulate the rate limiting
 CVE-2022-35487 (Zammad 5.2.0 suffers from Incorrect Access Control. Zammad did not cor ...)
 	- zammad <itp> (bug #841355)
 CVE-2022-35486 (OTFCC v0.10.4 was discovered to contain a segmentation violation via / ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35485 (OTFCC v0.10.4 was discovered to contain a segmentation violation via / ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35484 (OTFCC v0.10.4 was discovered to contain a segmentation violation via / ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35483 (OTFCC v0.10.4 was discovered to contain a segmentation violation via / ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35482 (OTFCC v0.10.4 was discovered to contain a segmentation violation via / ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35481 (OTFCC v0.10.4 was discovered to contain a segmentation violation via / ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35480
 	RESERVED
 CVE-2022-35479 (OTFCC v0.10.4 was discovered to contain a segmentation violation via / ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35478 (OTFCC v0.10.4 was discovered to contain a segmentation violation via / ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35477 (OTFCC v0.10.4 was discovered to contain a segmentation violation via / ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35476 (OTFCC v0.10.4 was discovered to contain a segmentation violation via / ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35475 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35474 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35473 (OTFCC v0.10.4 was discovered to contain a segmentation violation via / ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35472 (OTFCC v0.10.4 was discovered to contain a global overflow via /release ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35471 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35470 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35469 (OTFCC v0.10.4 was discovered to contain a segmentation violation via / ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35468 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35467 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35466 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35465 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35464 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35463 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35462 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35461 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35460 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35459 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35458 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35457
 	RESERVED
 CVE-2022-35456 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35455 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35454 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35453 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35452 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35451 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35450 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35449 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35448 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35447 (OTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /re ...)
-	TODO: check
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-35446
 	RESERVED
 CVE-2022-35445
@@ -13497,7 +13497,7 @@ CVE-2022-33049 (Online Railway Reservation System v1.0 was discovered to contain
 CVE-2022-33048 (Online Railway Reservation System v1.0 was discovered to contain a SQL ...)
 	NOT-FOR-US: Online Railway Reservation System
 CVE-2022-33047 (OTFCC v0.10.4 was discovered to contain a heap buffer overflow after f ...)
-	NOT-FOR-US: OTFCC
+	TODO: check, OTFCC is embedded in src:texlive-bin, but check actual impact
 CVE-2022-33046
 	RESERVED
 CVE-2022-33045



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6180ad5dab63c0c2a1e8e95e14ddc8736b7e7724

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6180ad5dab63c0c2a1e8e95e14ddc8736b7e7724
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220817/787746b4/attachment.htm>