Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e6ecd3d6 by Chris Lamb at 2018-05-19T08:35:45+02:00
Triage procps for LTS
- - - - -
e56b8cde by Chris Lamb at 2018-05-19T08:50:17+02:00
Triage CVE-2018-11129, CVE-2018-11130 & CVE-2018-11099 (vcftools) for
wheezy.
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -310,12 +310,14 @@ CVE-2018-11130 (The header::add_FORMAT_descriptor
function in header.cpp in VCFt
- vcftools <unfixed> (low)
[stretch] - vcftools <no-dsa> (Minor issue)
[jessie] - vcftools <no-dsa> (Minor issue)
+ [wheezy] - vcftools <no-dsa> (Minor issue)
NOTE: http://seclists.org/fulldisclosure/2018/May/43
NOTE: https://github.com/vcftools/vcftools/issues/109
CVE-2018-11129 (The header::add_INFO_descriptor function in header.cpp in
VCFtools ...)
- vcftools <unfixed> (low)
[stretch] - vcftools <no-dsa> (Minor issue)
[jessie] - vcftools <no-dsa> (Minor issue)
+ [wheezy] - vcftools <no-dsa> (Minor issue)
NOTE: http://seclists.org/fulldisclosure/2018/May/43
NOTE: https://github.com/vcftools/vcftools/issues/109
CVE-2018-11128 (The ObjReader::ReadObj() function in ObjReader.cpp in
vincent0629 ...)
@@ -383,6 +385,7 @@ CVE-2018-11099 (The header::add_INFO_descriptor function in
header.cpp in VCFtoo
- vcftools <unfixed> (low)
[stretch] - vcftools <no-dsa> (Minor issue)
[jessie] - vcftools <no-dsa> (Minor issue)
+ [wheezy] - vcftools <no-dsa> (Minor issue)
NOTE: http://seclists.org/fulldisclosure/2018/May/43
NOTE: https://github.com/vcftools/vcftools/issues/109
CVE-2018-11098 (An issue was discovered in Frog CMS 0.9.5. There is a file
upload ...)
=====================================
data/dla-needed.txt
=====================================
--- a/data/dla-needed.txt
+++ b/data/dla-needed.txt
@@ -42,6 +42,8 @@ openjdk-7 (Emilio Pozuelo)
--
phpmyadmin (Emilio Pozuelo)
--
+procps
+--
thunderbird (Emilio Pozuelo)
--
tiff
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/f97a13c076c26f13df2e30a4bfa3e045b3594c21...e56b8cdef0f8f4c74196cc076e03fbe1a1e8090d
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/f97a13c076c26f13df2e30a4bfa3e045b3594c21...e56b8cdef0f8f4c74196cc076e03fbe1a1e8090d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
