[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bd8d4a83 by security tracker role at 2022-05-01T08:10:14+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -38553,6 +38553,7 @@ CVE-2021-42262 (An issue was discovered in Softing OPC UA C++ SDK before 5.70. A
 CVE-2021-42261 (Revisor Video Management System (VMS) before 2.0.0 has a directory tra ...)
 	NOT-FOR-US: Revisor Video Management System (VMS)
 CVE-2021-42260 (TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp  ...)
+	{DLA-2988-1}
 	- tinyxml 2.6.2-6
 	[bullseye] - tinyxml <no-dsa> (Minor issue)
 	[buster] - tinyxml <no-dsa> (Minor issue)
@@ -39201,8 +39202,8 @@ CVE-2021-42003
 	RESERVED
 CVE-2021-42002 (Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter ...)
 	NOT-FOR-US: Zoho ManageEngine
-CVE-2021-42001
-	RESERVED
+CVE-2021-42001 (PingID Desktop prior to 1.7.3 has a misconfiguration in the encryption ...)
+	TODO: check
 CVE-2021-42000 (When a password reset or password change flow with an authentication p ...)
 	NOT-FOR-US: pingidentity
 CVE-2021-41999
@@ -39215,12 +39216,12 @@ CVE-2021-41996
 	RESERVED
 CVE-2021-41995
 	RESERVED
-CVE-2021-41994
-	RESERVED
-CVE-2021-41993
-	RESERVED
-CVE-2021-41992
-	RESERVED
+CVE-2021-41994 (A misconfiguration of RSA in PingID iOS app prior to 1.19 is vulnerabl ...)
+	TODO: check
+CVE-2021-41993 (A misconfiguration of RSA in PingID Android app prior to 1.19 is vulne ...)
+	TODO: check
+CVE-2021-41992 (A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vuln ...)
+	TODO: check
 CVE-2021-41991 (The in-memory certificate cache in strongSwan before 5.9.4 has a remot ...)
 	{DSA-4989-1 DLA-2788-1}
 	- strongswan 5.9.4-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd8d4a834fa9fc1f2a69f5bfbe50c9b6524857a6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd8d4a834fa9fc1f2a69f5bfbe50c9b6524857a6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220501/673dd32f/attachment.htm>