Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6164cfb2 by Salvatore Bonaccorso at 2018-06-03T15:52:11+02:00
Cleanup entries to be included in DSA
- - - - -
2 changed files:
- data/CVE/list
- data/next-point-update.txt
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -9984,8 +9984,6 @@ CVE-2018-1000119 (Sinatra rack-protection versions 1.5.4
and 2.0.0.rc3 and earli
NOTE:
https://github.com/sinatra/sinatra/commit/8aa6c42ef724f93ae309fb7c5668e19ad547eceb
CVE-2018-1000115 (Memcached version 1.5.5 contains an Insufficient Control of
Network ...)
- memcached 1.5.6-1
- [stretch] - memcached <no-dsa> (Minor issue; Debian defaults to listen
only on localhost)
- [jessie] - memcached <no-dsa> (Minor issue; Debian defaults to listen
only on localhost)
[wheezy] - memcached <no-dsa> (Minor issue; Debian defaults to listen
only on localhost)
NOTE: Upstream 1.5.6 disables by default the UDP protocol
NOTE:
https://github.com/memcached/memcached/commit/dbb7a8af90054bf4ef51f5814ef7ceb17d83d974
@@ -52075,8 +52073,6 @@ CVE-2017-9952
CVE-2017-9951 (The try_read_command function in memcached.c in memcached
before 1.4.39 ...)
{DLA-1033-1}
- memcached 1.5.0-1 (bug #868701)
- [stretch] - memcached <no-dsa> (Minor issue)
- [jessie] - memcached <no-dsa> (Minor issue)
NOTE:
https://www.twistlock.com/2017/07/13/cve-2017-9951-heap-overflow-memcached-server-1-4-38-twistlock-vulnerability-report/
NOTE:
https://github.com/memcached/memcached/commit/328629445c71e6c17074f6e9e0e3ef585b58f167
CVE-2017-9950
=====================================
data/next-point-update.txt
=====================================
--- a/data/next-point-update.txt
+++ b/data/next-point-update.txt
@@ -6,10 +6,6 @@ CVE-2017-5715
[stretch] - nvidia-graphics-drivers 384.111-4~deb9u1
CVE-2017-12424
[stretch] - shadow 1:4.4-4.1+deb9u1
-CVE-2017-9951
- [stretch] - memcached 1.4.33-1+deb9u1
-CVE-2018-1000115
- [stretch] - memcached 1.4.33-1+deb9u1
CVE-2015-XXXX [busybox: pointer misuse unziping files]
[stretch] - busybox 1:1.22.0-19+deb9u1
NOTE: For #803097
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/6164cfb299c8e2c2c75377f0311c98600a35c12b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/6164cfb299c8e2c2c75377f0311c98600a35c12b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
