Ola Lundqvist pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5dcf7527 by Ola Lundqvist at 2018-05-10T21:03:12+02:00
Triage result.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -372,6 +372,7 @@ CVE-2018-10795 (Liferay 6.2.x and before has an FCKeditor
configuration that all
CVE-2017-18265 (Prosody before 0.10.0 allows remote attackers to cause a
denial of ...)
{DSA-4198-1}
- prosody 0.10.0-1 (bug #875829)
+ [wheezy] - prosody <not-affected> (Vulnerable code not present)
NOTE: https://prosody.im/issues/issue/987
CVE-2018-10794
RESERVED
@@ -441,6 +442,7 @@ CVE-2018-10769
CVE-2018-10768 (There is a NULL pointer dereference in the
AnnotPath::getCoordsLength ...)
- poppler 0.38.0-2
[jessie] - poppler <no-dsa> (Minor issue)
+ [wheezy] - poppler <not-affected> (Vulnerable code is not present)
NOTE: https://bugs.freedesktop.org/show_bug.cgi?id=106408
NOTE: Fixed by:
https://cgit.freedesktop.org/poppler/poppler/commit/?id=942adfc25e7a00ac3cf032ced2d8949e99099f70
(poppler-0.37)
CVE-2018-10767 (There is a stack-based buffer over-read in calling GLib in the
function ...)
@@ -27097,6 +27099,7 @@ CVE-2018-1046 [stack-based buffer overflow in dnsreplay]
- pdns <unfixed> (bug #898255)
[stretch] - pdns <no-dsa> (local DoS when parsing untrusted files)
[jessie] - pdns <not-affected> (Vulnerable code not present)
+ [wheezy] - pdns <not-affected> (Vulnerable code not present)
NOTE:
https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2018-02.html
NOTE: Fixed by
https://github.com/PowerDNS/pdns/commit/f9c57c98da1b1007a51680629b667d57d9b702b8
CVE-2018-1045 (In Moodle 3.x, there is XSS via a calendar event name. ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/5dcf75278135b9b913b86f318781776bc45b6556
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/5dcf75278135b9b913b86f318781776bc45b6556
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
