Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
184f4d1f by Salvatore Bonaccorso at 2018-04-30T22:12:15+02:00
Add glusterfs to dsa-needed list
- - - - -
693bc8f0 by Salvatore Bonaccorso at 2018-04-30T22:14:53+02:00
Process NFUs
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,11 +1,11 @@
CVE-2018-10573 (interface/fax/fax_dispatch.php in OpenEMR before 5.0.1 allows
remote ...)
- TODO: check
+ NOT-FOR-US: OpenEMR
CVE-2018-10572 (interface/patient_file/letter.php in OpenEMR before 5.0.1
allows remote ...)
- TODO: check
+ NOT-FOR-US: OpenEMR
CVE-2018-10571 (Multiple reflected cross-site scripting (XSS) vulnerabilities
in ...)
- TODO: check
+ NOT-FOR-US: OpenEMR
CVE-2018-10570 (Frog CMS 0.9.5 has XSS in /install/index.php via the ...)
- TODO: check
+ NOT-FOR-US: Frog CMS
CVE-2018-10569
RESERVED
CVE-2018-10568
@@ -2885,7 +2885,7 @@ CVE-2018-1000152 (An improper authorization vulnerability
exists in Jenkins vSph
CVE-2018-1000153 (A cross-site request forgery vulnerability exists in Jenkins
vSphere ...)
NOT-FOR-US: Jenkins plugin
CVE-2018-9310 (An issue was discovered in MagniComp SysInfo before 10-H81 if
setuid ...)
- TODO: check
+ NOT-FOR-US: MagniComp SysInfo
CVE-2018-9309 (An issue was discovered in zzcms 8.2. It allows SQL injection
via the ...)
NOT-FOR-US: zzcms
CVE-2018-9308
@@ -4115,7 +4115,7 @@ CVE-2018-8841
CVE-2018-8840 (A remote attacker could send a carefully crafted packet in
InduSoft ...)
NOT-FOR-US: InduSoft
CVE-2018-8839 (Delta PMSoft versions 2.10 and prior have multiple stack-based
buffer ...)
- TODO: check
+ NOT-FOR-US: Delta PMSoft
CVE-2018-8838 (A weakness in access controls in CENTUM CS 1000 all versions,
CENTUM ...)
NOT-FOR-US: CENTUM
CVE-2018-8837 (Processing specially crafted .pm3 files in Advantech WebAccess
HMI ...)
=====================================
data/dsa-needed.txt
=====================================
--- a/data/dsa-needed.txt
+++ b/data/dsa-needed.txt
@@ -25,6 +25,8 @@ ffmpeg/stable
gitlab
Pirate Praveen will prepare updates
--
+glusterfs
+--
graphicsmagick
--
imagemagick
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/2c32a71a724f3a5d1116393812c2dc9f2b67f214...693bc8f0b16fb52ff43e7030b6647dba45bf89f7
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/2c32a71a724f3a5d1116393812c2dc9f2b67f214...693bc8f0b16fb52ff43e7030b6647dba45bf89f7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
