Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d0598735 by Salvatore Bonaccorso at 2018-04-20T20:29:42+02:00
Cleanup CVE-2018-9146
Further research has shown that this was a reservation duplicate of
CVE-2017-17724. Next MITRE updates should cleanup this entry
accordingly, already drop it from tracker.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -2538,11 +2538,8 @@ CVE-2018-9148 (Western Digital WD My Cloud v04.05.00-320
devices embed the sessi
NOT-FOR-US: Western Digital WD My Cloud
CVE-2018-9147 (Cross-site scripting (XSS) vulnerabilities in version 7.5.7 of
Gespage ...)
NOT-FOR-US: Gespage
-CVE-2018-9146 (In Exiv2 0.26, there is an out-of-bounds read in ...)
- - exiv2 <undetermined>
- [wheezy] - exiv2 <ignored> (Minor issue)
- NOTE: https://github.com/Exiv2/exiv2/issues/254
- NOTE: https://github.com/xiaoqx/pocs/tree/master/exiv2
+CVE-2018-9146
+ REJECTED
CVE-2018-9145 (In the DataBuf class in include/exiv2/types.hpp in Exiv2 0.26,
an ...)
- exiv2 <undetermined>
[wheezy] - exiv2 <ignored> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/d05987355bd7b62af90b6db02d8bba00c9c70e42
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/d05987355bd7b62af90b6db02d8bba00c9c70e42
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
