Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
747efd0d by Moritz Muehlenhoff at 2018-05-17T19:03:04+02:00
bugs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -12111,7 +12111,7 @@ CVE-2018-6563
CVE-2018-6562
RESERVED
CVE-2018-6561 (dijit.Editor in Dojo Toolkit 1.13 allows XSS via the onload
attribute ...)
- - dojo <unfixed>
+ - dojo <unfixed> (bug #898944)
[jessie] - dojo <ignored> (Minor issue)
[wheezy] - dojo <no-dsa> (Minor issue)
NOTE: https://github.com/imsebao/404team/blob/master/dijit_editor_xss.md
@@ -74547,12 +74547,12 @@ CVE-2017-2923 (An exploitable heap based buffer
overflow vulnerability exists in
NOTE:
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0430
NOTE: https://www.gaia-gis.it/fossil/freexl/ci/40c17539ea56f0d8
CVE-2017-2922 (An exploitable memory corruption vulnerability exists in the
Websocket ...)
- - smplayer <unfixed>
+ - smplayer <unfixed> (bug #898943)
[stretch] - smplayer <not-affected> (Vulnerable code not present)
[jessie] - smplayer <not-affected> (Vulnerable code not present)
[wheezy] - smplayer <not-affected> (Vulnerable code not present)
CVE-2017-2921 (An exploitable memory corruption vulnerability exists in the
Websocket ...)
- - smplayer <unfixed>
+ - smplayer <unfixed> (bug #898943)
[stretch] - smplayer <not-affected> (Vulnerable code not present)
[jessie] - smplayer <not-affected> (Vulnerable code not present)
[wheezy] - smplayer <not-affected> (Vulnerable code not present)
@@ -74584,7 +74584,7 @@ CVE-2017-2911 (An exploitable vulnerability exists in
the remote control ...)
CVE-2017-2910
RESERVED
CVE-2017-2909 (An infinite loop programming error exists in the DNS server ...)
- - smplayer <unfixed>
+ - smplayer <unfixed> (bug #898943)
[stretch] - smplayer <not-affected> (Vulnerable code not present)
[jessie] - smplayer <not-affected> (Vulnerable code not present)
[wheezy] - smplayer <not-affected> (Vulnerable code not present)
@@ -74650,27 +74650,27 @@ CVE-2017-2896 (An exploitable out-of-bounds write
vulnerability exists in the ..
- r-cran-readxl 1.0.0-2 (bug #895564)
NOTE:
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0403
CVE-2017-2895 (An exploitable arbitrary memory read vulnerability exists in
the MQTT ...)
- - smplayer <unfixed>
+ - smplayer <unfixed> (bug #898943)
[stretch] - smplayer <not-affected> (Vulnerable code not present)
[jessie] - smplayer <not-affected> (Vulnerable code not present)
[wheezy] - smplayer <not-affected> (Vulnerable code not present)
CVE-2017-2894 (An exploitable stack buffer overflow vulnerability exists in
the MQTT ...)
- - smplayer <unfixed>
+ - smplayer <unfixed> (bug #898943)
[stretch] - smplayer <not-affected> (Vulnerable code not present)
[jessie] - smplayer <not-affected> (Vulnerable code not present)
[wheezy] - smplayer <not-affected> (Vulnerable code not present)
CVE-2017-2893 (An exploitable NULL pointer dereference vulnerability exists in
the ...)
- - smplayer <unfixed>
+ - smplayer <unfixed> (bug #898943)
[stretch] - smplayer <not-affected> (Vulnerable code not present)
[jessie] - smplayer <not-affected> (Vulnerable code not present)
[wheezy] - smplayer <not-affected> (Vulnerable code not present)
CVE-2017-2892 (An exploitable arbitrary memory read vulnerability exists in
the MQTT ...)
- - smplayer <unfixed>
+ - smplayer <unfixed> (bug #898943)
[stretch] - smplayer <not-affected> (Vulnerable code not present)
[jessie] - smplayer <not-affected> (Vulnerable code not present)
[wheezy] - smplayer <not-affected> (Vulnerable code not present)
CVE-2017-2891 (An exploitable use-after-free vulnerability exists in the HTTP
server ...)
- - smplayer <unfixed>
+ - smplayer <unfixed> (bug #898943)
[stretch] - smplayer <not-affected> (Vulnerable code not present)
[jessie] - smplayer <not-affected> (Vulnerable code not present)
[wheezy] - smplayer <not-affected> (Vulnerable code not present)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/747efd0d3b0fd764e67c378bfa496b06499fa65c
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/747efd0d3b0fd764e67c378bfa496b06499fa65c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
