summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMoritz Muehlenhoff <jmm@debian.org>2022-02-10 10:57:00 +0100
committerMoritz Muehlenhoff <jmm@debian.org>2022-02-10 10:57:36 +0100
commitb5d6e97479db51bb56633936a296c6070323875f (patch)
treed9405e17fd0161d63e088a6ef065e822bc879079
parent550721e437c4e7900fb30c906d037d90d2fee13a (diff)
buster/bullseye triage
new jss issue
-rw-r--r--data/CVE/list.20212
-rw-r--r--data/CVE/list.20227
2 files changed, 8 insertions, 1 deletions
diff --git a/data/CVE/list.2021 b/data/CVE/list.2021
index 0704c5a1d3..99bdb966be 100644
--- a/data/CVE/list.2021
+++ b/data/CVE/list.2021
@@ -316,6 +316,8 @@ CVE-2021-4214
NOTE: Crash in CLI package, not shipped in binary packages
CVE-2021-4213
RESERVED
+ - jss <unfixed>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2042900
CVE-2021-4212
RESERVED
CVE-2021-4211
diff --git a/data/CVE/list.2022 b/data/CVE/list.2022
index 4bb826cf44..a5d7efee9c 100644
--- a/data/CVE/list.2022
+++ b/data/CVE/list.2022
@@ -817,6 +817,7 @@ CVE-2022-0486
CVE-2022-0485 [nbdcopy: missing error handling may create corrupted destination image]
RESERVED
- libnbd <unfixed>
+ [bullseye] - libnbd <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2050324
NOTE: Fixed by: https://gitlab.com/nbdkit/libnbd/-/commit/8d444b41d09a700c7ee6f9182a649f3f2d325abb
NOTE: https://listman.redhat.com/archives/libguestfs/2022-February/msg00104.html
@@ -2360,8 +2361,12 @@ CVE-2022-23854
CVE-2022-23853
RESERVED
- kate <unfixed>
+ [bullseye] - kate <no-dsa> (Minor issue)
+ [buster] - kate <no-dsa> (Minor issue)
[stretch] - kate <no-dsa> (Minor issue)
- ktexteditor <unfixed>
+ [bullseye] - ktexteditor <no-dsa> (Minor issue)
+ [buster] - ktexteditor <no-dsa> (Minor issue)
[stretch] - ktexteditor <no-dsa> (Minor issue)
NOTE: https://kde.org/info/security/advisory-20220131-1.txt
NOTE: KTextEditor: Fixed by: https://commits.kde.org/ktexteditor/804e49444c093fe58ec0df2ab436565e50dc147e
@@ -7459,7 +7464,7 @@ CVE-2022-21988 (Microsoft Office Visio Remote Code Execution Vulnerability. ...)
CVE-2022-21987 (Microsoft SharePoint Server Spoofing Vulnerability. ...)
NOT-FOR-US: Microsoft
CVE-2022-21986 (.NET Denial of Service Vulnerability. ...)
- TODO: check
+ NOT-FOR-US: Microsoft .NET
CVE-2022-21985 (Windows Remote Access Connection Manager Information Disclosure Vulner ...)
NOT-FOR-US: Microsoft
CVE-2022-21984 (Windows DNS Server Remote Code Execution Vulnerability. ...)

© 2014-2024 Faster IT GmbH | imprint | privacy policy