[Git][security-tracker-team/security-tracker][master] Track new set of ntfs-3g issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu May 26 12:26:03 BST 2022



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
06f948d1 by Salvatore Bonaccorso at 2022-05-26T13:25:37+02:00
Track new set of ntfs-3g issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2539,18 +2539,32 @@ CVE-2022-30790
 	RESERVED
 CVE-2022-30789
 	RESERVED
+	- ntfs-3g <unfixed>
+	NOTE: https://www.openwall.com/lists/oss-security/2022/05/26/1
 CVE-2022-30788
 	RESERVED
+	- ntfs-3g <unfixed>
+	NOTE: https://www.openwall.com/lists/oss-security/2022/05/26/1
 CVE-2022-30787
 	RESERVED
+	- ntfs-3g <unfixed>
+	NOTE: https://www.openwall.com/lists/oss-security/2022/05/26/2
 CVE-2022-30786
 	RESERVED
+	- ntfs-3g <unfixed>
+	NOTE: https://www.openwall.com/lists/oss-security/2022/05/26/1
 CVE-2022-30785
 	RESERVED
+	- ntfs-3g <unfixed>
+	NOTE: https://www.openwall.com/lists/oss-security/2022/05/26/2
 CVE-2022-30784
 	RESERVED
+	- ntfs-3g <unfixed>
+	NOTE: https://www.openwall.com/lists/oss-security/2022/05/26/1
 CVE-2022-30783
 	RESERVED
+	- ntfs-3g <unfixed>
+	NOTE: https://www.openwall.com/lists/oss-security/2022/05/26/2
 CVE-2022-30782 (Openmoney API through 2020-06-29 uses the JavaScript Math.random funct ...)
 	NOT-FOR-US: Openmoney
 CVE-2022-30781 (Gitea before 1.16.7 does not escape git fetch remote. ...)
@@ -4710,6 +4724,7 @@ CVE-2022-1545 (It was possible to disclose details of confidential notes created
 CVE-2021-46790 (ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow i ...)
 	- ntfs-3g <unfixed>
 	NOTE: https://github.com/tuxera/ntfs-3g/issues/16
+	NOTE: https://www.openwall.com/lists/oss-security/2022/05/26/1
 CVE-2022-1544 (Formula Injection/CSV Injection due to Improper Neutralization of Form ...)
 	NOT-FOR-US: yii-helpers
 CVE-2022-29967 (static_compressed_inmemory_website_callback.c in Glewlwyd through 2.6. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/06f948d13783ffed2d226d1fb9c48d0094282abb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/06f948d13783ffed2d226d1fb9c48d0094282abb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220526/c482ee95/attachment.htm>


More information about the debian-security-tracker-commits mailing list