[Git][security-tracker-team/security-tracker][master] buster/bullseye triage

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7ea55732 by Moritz Muehlenhoff at 2022-05-09T22:35:56+02:00
buster/bullseye triage

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8404,6 +8404,8 @@ CVE-2022-27471
 	RESERVED
 CVE-2022-27470 (SDL_ttf v2.0.18 and below was discovered to contain an arbitrary memor ...)
 	- libsdl2-ttf 2.0.18+dfsg-3 (bug #1010671)
+	[bullseye] - libsdl2-ttf <no-dsa> (Minor issue)
+	[buster] - libsdl2-ttf <no-dsa> (Minor issue)
 	NOTE: https://github.com/libsdl-org/SDL_ttf/commit/db1b41ab8bde6723c24b866e466cad78c2fa0448
 	NOTE: https://github.com/libsdl-org/SDL_ttf/issues/187
 CVE-2022-27469 (Monstaftp v2.10.3 was discovered to allow attackers to execute Server- ...)
@@ -40283,6 +40285,7 @@ CVE-2021-42219 (Go-Ethereum v1.10.9 was discovered to contain an issue which all
 	- golang-github-go-ethereum <itp> (bug #890541)
 CVE-2021-42218 (OMPL v1.5.2 contains a memory leak in VFRRT.cpp ...)
 	- ompl <unfixed>
+	[bullseye] - ompl <no-dsa> (Minor issue)
 	NOTE: https://github.com/ompl/ompl/issues/839
 	NOTE: https://github.com/ompl/ompl/commit/abb4fadcb4e4fe4c9cf41e5e7706143a66948eb7
 CVE-2021-42217
@@ -40951,6 +40954,8 @@ CVE-2021-41960
 	RESERVED
 CVE-2021-41959 (JerryScript Git version 14ff5bf does not sufficiently track and releas ...)
 	- iotjs <unfixed>
+	[bullseye] - iotjs <no-dsa> (Minor issue)
+	[buster] - iotjs <no-dsa> (Minor issue)
 	NOTE: https://github.com/jerryscript-project/jerryscript/issues/4781
 	NOTE: https://github.com/jerryscript-project/jerryscript/pull/4166
 	NOTE: https://github.com/jerryscript-project/jerryscript/pull/4787
@@ -49749,11 +49754,11 @@ CVE-2021-38427 (RTI Connext DDS Professional and Connext DDS Secure Versions 4.2
 CVE-2021-38426 (FATEK Automation WinProladder versions 3.30 and prior lacks proper val ...)
 	NOT-FOR-US: FATEK Automation
 CVE-2021-38425 (eProsima Fast DDS versions prior to 2.4.0 (#2269) are susceptible to e ...)
-	- fastdds <undetermined>
+	- fastdds <unfixed>
+	[bullseye] - fastdds <no-dsa> (Minor issue)
 	NOTE: https://github.com/eProsima/Fast-DDS/issues/2267
 	NOTE: https://github.com/eProsima/Fast-DDS/pull/2269
 	NOTE: https://www.cisa.gov/uscert/ics/advisories/icsa-21-315-02
-	TODO: check completeness
 CVE-2021-38424 (The tag interface of Delta Electronics DIALink versions 1.2.4.0 and pr ...)
 	NOT-FOR-US: Delta Electronics DIALink
 CVE-2021-38423 (All versions of GurumDDS improperly calculate the size to be used when ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ea557328d4a2adbbe84e1356afcf0dc1b240585

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ea557328d4a2adbbe84e1356afcf0dc1b240585
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220509/d766537b/attachment.htm>