[Git][security-tracker-team/security-tracker][master] thunderbird, chromium fixed in sid
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Fri Dec 2 07:57:48 GMT 2022
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
02e5afee by Moritz Muehlenhoff at 2022-12-02T08:57:21+01:00
thunderbird, chromium fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -422,74 +422,74 @@ CVE-2022-4197
CVE-2022-4196
RESERVED
CVE-2022-4195 (Insufficient policy enforcement in Safe Browsing in Google Chrome prio ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4194 (Use after free in Accessibility in Google Chrome prior to 108.0.5359.7 ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4193 (Insufficient policy enforcement in File System API in Google Chrome pr ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4192 (Use after free in Live Caption in Google Chrome prior to 108.0.5359.71 ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4191 (Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allo ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4190 (Insufficient data validation in Directory in Google Chrome prior to 10 ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4189 (Insufficient policy enforcement in DevTools in Google Chrome prior to ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4188 (Insufficient validation of untrusted input in CORS in Google Chrome on ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4187 (Insufficient policy enforcement in DevTools in Google Chrome on Window ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4186 (Insufficient validation of untrusted input in Downloads in Google Chro ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4185 (Inappropriate implementation in Navigation in Google Chrome on iOS pri ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4184 (Insufficient policy enforcement in Autofill in Google Chrome prior to ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4183 (Insufficient policy enforcement in Popup Blocker in Google Chrome prio ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4182 (Inappropriate implementation in Fenced Frames in Google Chrome prior t ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4181 (Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowe ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4180 (Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-41795
RESERVED
CVE-2022-41793
RESERVED
CVE-2022-4179 (Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowe ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4178 (Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4177 (Use after free in Extensions in Google Chrome prior to 108.0.5359.71 a ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4176 (Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS a ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4175 (Use after free in Camera Capture in Google Chrome prior to 108.0.5359. ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4174 (Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a ...)
- - chromium <unfixed>
+ - chromium 108.0.5359.71-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2022-4173
RESERVED
@@ -2910,7 +2910,7 @@ CVE-2022-45415
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2022-47/#CVE-2022-45415
CVE-2022-45414
RESERVED
- - thunderbird <unfixed>
+ - thunderbird 1:102.5.1-1
[bullseye] - thunderbird <postponed> (Minor issue, fix along in next ESR update)
NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2022-50/#CVE-2022-45414
CVE-2022-45413
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/02e5afeeb550da932b39c16c1a4106bc2c0811ec
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/02e5afeeb550da932b39c16c1a4106bc2c0811ec
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221202/c44b5f90/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list