Brian May pushed to branch master at Debian Security Tracker / security-tracker
Commits:
7caee173 by Brian May at 2018-05-04T16:36:29+10:00
Mark cacti no-dsa in wheezy
These security issues already marked no-dsa in Jessie and Stretch,
and probably should be no-dsa in Wheezy too.
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1603,11 +1603,13 @@ CVE-2018-10061 (Cacti before 1.1.37 has XSS because it
makes certain htmlspecial
- cacti 1.1.37+ds1-1 (low)
[stretch] - cacti <no-dsa> (Minor issue)
[jessie] - cacti <no-dsa> (Minor issue)
+ [wheezy] - cacti <no-dsa> (Minor issue)
NOTE: https://github.com/Cacti/cacti/issues/1457
CVE-2018-10060 (Cacti before 1.1.37 has XSS because it does not properly
reject ...)
- cacti 1.1.37+ds1-1 (low)
[stretch] - cacti <no-dsa> (Minor issue)
[jessie] - cacti <no-dsa> (Minor issue)
+ [wheezy] - cacti <no-dsa> (Minor issue)
NOTE: https://github.com/Cacti/cacti/issues/1457
CVE-2018-10059 (Cacti before 1.1.37 has XSS because the get_current_page
function in ...)
- cacti 1.1.37+ds1-1
=====================================
data/dla-needed.txt
=====================================
--- a/data/dla-needed.txt
+++ b/data/dla-needed.txt
@@ -12,12 +12,6 @@
https://wiki.debian.org/LTS/Development#Triage_new_security_issues
--
apache2 (Roberto C. Sánchez)
--
-cacti
- NOTE: 20180419: Only few commits apply to the Wheezy version so there is
- NOTE: 20180419: probably less to fix than it looks like (apo)
- NOTE: 20180426: Probably common with stretch patches. I fear the above just
means that
- NOTE: 20180426: it is more work, hence I didn't even start on it for
stretch. (elbrus)
---
calibre (Brian May)
NOTE: 20180321: Instead of replacing pickle with json, maybe disable
bookmarking (apo)
NOTE: 20180321: completely and invest the time to fix the Jessie version
instead? (apo)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/7caee1732319c4bf3368db82efa2b90da1426a0e
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/7caee1732319c4bf3368db82efa2b90da1426a0e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
