[Git][security-tracker-team/security-tracker][master] bugnums

Moritz Muehlenhoff (@jmm) jmm at debian.org
Thu Oct 17 23:44:38 BST 2024 


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bf0556d1 by Moritz Mühlenhoff at 2024-10-17T23:12:03+02:00
bugnums

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -726,7 +726,7 @@ CVE-2024-9984 (Enterprise Cloud Database from Ragic does not authenticate access
 CVE-2024-9983 (Enterprise Cloud Database from Ragic does not properly validate a spec ...)
 	NOT-FOR-US: Enterprise Cloud Database from Ragic
 CVE-2024-9979 (A flaw was found in PyO3. This vulnerability causes a use-after-free i ...)
-	- rust-pyo3 <unfixed>
+	- rust-pyo3 <unfixed> (bug #1085296)
 	[bookworm] - rust-pyo3 <not-affected> (Vulnerable code introduced later)
 	NOTE: https://github.com/PyO3/pyo3/pull/4590
 	NOTE: https://rustsec.org/advisories/RUSTSEC-2024-0378.html
@@ -769,7 +769,7 @@ CVE-2024-49195 (Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun
 	- mbedtls <undetermined>
 	NOTE: https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2024-10-1/
 CVE-2024-48948 (The Elliptic package 6.5.7 for Node.js, in its for ECDSA implementatio ...)
-	- node-elliptic <unfixed>
+	- node-elliptic <unfixed> (bug #1085298)
 	NOTE: https://github.com/indutny/elliptic/issues/321
 	NOTE: https://github.com/indutny/elliptic/pull/322
 CVE-2024-48915 (Agent Dart is an agent library built for Internet Computer for Dart an ...)
@@ -803,7 +803,7 @@ CVE-2024-47943 (The firmware upgrade function in the admin web interface of the
 CVE-2024-47876 (Sakai is a Collaboration and Learning Environment. Starting in version ...)
 	NOT-FOR-US: Sakai
 CVE-2024-47874 (Starlette is an Asynchronous Server Gateway Interface (ASGI) framework ...)
-	- starlette <unfixed>
+	- starlette <unfixed> (bug #1085295)
 	NOTE: https://github.com/encode/starlette/security/advisories/GHSA-f96h-pmfr-66vw
 	NOTE: https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733 (0.40.0)
 CVE-2024-47824 (matrix-react-sdk is react-based software development kit for inserting ...)
@@ -861,7 +861,7 @@ CVE-2024-21274 (Vulnerability in the Oracle WebLogic Server product of Oracle Fu
 CVE-2024-21273 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza ...)
 	- virtualbox <unfixed>
 CVE-2024-21272 (Vulnerability in the MySQL Connectors product of Oracle MySQL (compone ...)
-	- mysql-connector-python <unfixed>
+	- mysql-connector-python <unfixed> (bug #1085297)
 CVE-2024-21271 (Vulnerability in the Oracle Field Service product of Oracle E-Business ...)
 	NOT-FOR-US: Oracle
 CVE-2024-21270 (Vulnerability in the Oracle Common Applications Calendar product of Or ...)
@@ -909,7 +909,7 @@ CVE-2024-21249 (Vulnerability in the PeopleSoft Enterprise FIN Expenses product
 CVE-2024-21248 (Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza ...)
 	- virtualbox <unfixed>
 CVE-2024-21247 (Vulnerability in the MySQL Client product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21246 (Vulnerability in the Oracle Service Bus product of Oracle Fusion Middl ...)
 	NOT-FOR-US: Oracle
 CVE-2024-21244 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
@@ -919,15 +919,15 @@ CVE-2024-21243 (Vulnerability in the MySQL Server product of Oracle MySQL (compo
 CVE-2024-21242 (Vulnerability in the XML Database component of Oracle Database Server. ...)
 	NOT-FOR-US: Oracle
 CVE-2024-21241 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21239 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21238 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21237 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21236 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21235 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
 	- openjdk-8 <unfixed>
 	- openjdk-11 11.0.25+9-1
@@ -940,13 +940,13 @@ CVE-2024-21233 (Vulnerability in the Oracle Database Core component of Oracle Da
 CVE-2024-21232 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
 	- mysql-8.0 <not-affected> (Only affects 8.4 and later)
 CVE-2024-21231 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21230 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21219 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21218 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21217 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
 	- openjdk-8 <unfixed>
 	- openjdk-11 11.0.25+9-1
@@ -959,9 +959,9 @@ CVE-2024-21215 (Vulnerability in the Oracle WebLogic Server product of Oracle Fu
 CVE-2024-21214 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
 	NOT-FOR-US: Oracle
 CVE-2024-21213 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21212 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21211 (Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr ...)
 	- openjdk-23 23.0.1+11-1
 CVE-2024-21210 (Vulnerability in Oracle Java SE (component: Hotspot).  Supported versi ...)
@@ -985,27 +985,27 @@ CVE-2024-21205 (Vulnerability in the Oracle Service Bus product of Oracle Fusion
 CVE-2024-21204 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
 	- mysql-8.0 <not-affected> (Only affects 8.4 and later)
 CVE-2024-21203 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21202 (Vulnerability in the PeopleSoft Enterprise PeopleTools product of Orac ...)
 	NOT-FOR-US: Oracle
 CVE-2024-21201 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21200 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
 	- mysql-8.0 8.0.36-1
 CVE-2024-21199 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21198 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21197 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21196 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21195 (Vulnerability in the Oracle BI Publisher product of Oracle Analytics ( ...)
 	NOT-FOR-US: Oracle
 CVE-2024-21194 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21193 (Vulnerability in the MySQL Server product of Oracle MySQL (component:  ...)
-	- mysql-8.0 <unfixed>
+	- mysql-8.0 <unfixed> (bug #1085294)
 CVE-2024-21192 (Vulnerability in the Oracle Enterprise Manager for Fusion Middleware p ...)
 	NOT-FOR-US: Oracle
 CVE-2024-21191 (Vulnerability in the Oracle Enterprise Manager Fusion Middleware Contr ...)
@@ -1269,7 +1269,7 @@ CVE-2024-8757 (The WP Post Author \u2013 Boost Your Blog's Engagement with
 CVE-2024-49193 (Zendesk before 2024-07-02 allows remote attackers to read ticket histo ...)
 	NOT-FOR-US: Zendesk
 CVE-2024-6519 [qemu: SCSI: lsi53c895a: use-after-free local privilege escalation vulnerability]
-	- qemu <unfixed>
+	- qemu <unfixed> (bug #1085299)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2292089
 CVE-2024-9860 (The Bridge Core plugin for WordPress is vulnerable to unauthorized mod ...)
 	NOT-FOR-US: WordPress plugin



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bf0556d1ab18b84b9d25557cc81006422841136a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bf0556d1ab18b84b9d25557cc81006422841136a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241017/ae9ab029/attachment.htm>

More information about the debian-security-tracker-commits mailing list