Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e9cb9f35 by security tracker role at 2018-07-03T08:10:46+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,12 +1,120 @@
+CVE-2018-13100 (An issue was discovered in fs/f2fs/super.c in the Linux kernel
through ...)
+ TODO: check
+CVE-2018-13099 (An issue was discovered in fs/f2fs/inline.c in the Linux
kernel through ...)
+ TODO: check
+CVE-2018-13098 (An issue was discovered in fs/f2fs/inode.c in the Linux kernel
through ...)
+ TODO: check
+CVE-2018-13097 (An issue was discovered in fs/f2fs/super.c in the Linux kernel
through ...)
+ TODO: check
+CVE-2018-13096 (An issue was discovered in fs/f2fs/super.c in the Linux kernel
through ...)
+ TODO: check
+CVE-2018-13095 (An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in
the Linux ...)
+ TODO: check
+CVE-2018-13094 (An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in
the Linux ...)
+ TODO: check
+CVE-2018-13093 (An issue was discovered in fs/xfs/xfs_icache.c in the Linux
kernel ...)
+ TODO: check
+CVE-2018-13092 (The mintToken function of a smart contract implementation for
Reimburse ...)
+ TODO: check
+CVE-2018-13091 (The mintToken function of a smart contract implementation for
sumocoin ...)
+ TODO: check
+CVE-2018-13090 (The mintToken function of a smart contract implementation for
...)
+ TODO: check
+CVE-2018-13089 (The mintToken function of a smart contract implementation for
Universal ...)
+ TODO: check
+CVE-2018-13088 (The mintToken function of a smart contract implementation for
Futures ...)
+ TODO: check
+CVE-2018-13087 (The mintToken function of a smart contract implementation for
Coinstar ...)
+ TODO: check
+CVE-2018-13086 (The mintToken function of a smart contract implementation for
IADOWR ...)
+ TODO: check
+CVE-2018-13085 (The mintToken function of a smart contract implementation for
FreeCoin ...)
+ TODO: check
+CVE-2018-13084 (The mintToken function of a smart contract implementation for
Good Time ...)
+ TODO: check
+CVE-2018-13083 (The mintToken function of a smart contract implementation for
Plaza ...)
+ TODO: check
+CVE-2018-13082 (The mintToken function of a smart contract implementation for
MODI ...)
+ TODO: check
+CVE-2018-13081 (The mintToken function of a smart contract implementation for
GZS Token ...)
+ TODO: check
+CVE-2018-13080 (The mintToken function of a smart contract implementation for
Goutex ...)
+ TODO: check
+CVE-2018-13079 (The mintToken function of a smart contract implementation for
GoodTo ...)
+ TODO: check
+CVE-2018-13078 (The mintToken function of a smart contract implementation for
Jitech ...)
+ TODO: check
+CVE-2018-13077 (The mintToken function of a smart contract implementation for
CTB, an ...)
+ TODO: check
+CVE-2018-13076 (The mintToken function of a smart contract implementation for
Betcash ...)
+ TODO: check
+CVE-2018-13075 (The mintToken function of a smart contract implementation for
Carbon ...)
+ TODO: check
+CVE-2018-13074 (The mintToken function of a smart contract implementation for
FIBToken ...)
+ TODO: check
+CVE-2018-13073 (The mintToken function of a smart contract implementation for
...)
+ TODO: check
+CVE-2018-13072 (The mintToken function of a smart contract implementation for
...)
+ TODO: check
+CVE-2018-13071 (The mintToken function of a smart contract implementation for
CCindex10 ...)
+ TODO: check
+CVE-2018-13070 (The mintToken function of a smart contract implementation for
...)
+ TODO: check
+CVE-2018-13069 (The mintToken function of a smart contract implementation for
DYchain ...)
+ TODO: check
+CVE-2018-13068 (The mintToken function of a smart contract implementation for
...)
+ TODO: check
+CVE-2018-13067 (/upload/catalog/controller/account/password.php in OpenCart
through ...)
+ TODO: check
+CVE-2018-13066 (There is a memory leak in util/parser.c in libming 0.4.8,
which will ...)
+ TODO: check
+CVE-2018-13065
+ RESERVED
+CVE-2018-13064
+ RESERVED
+CVE-2018-13063
+ RESERVED
+CVE-2018-13062
+ RESERVED
+CVE-2018-13061
+ RESERVED
+CVE-2018-13060
+ RESERVED
+CVE-2018-13059
+ RESERVED
+CVE-2018-13058
+ RESERVED
+CVE-2018-13057
+ RESERVED
+CVE-2018-13056 (An issue was discovered on zzcms 8.3. There is a vulnerability
at ...)
+ TODO: check
+CVE-2018-13055
+ RESERVED
+CVE-2018-13053 (The alarm_timer_nsleep function in kernel/time/alarmtimer.c in
the ...)
+ TODO: check
+CVE-2018-13052
+ RESERVED
+CVE-2018-13051
+ RESERVED
+CVE-2018-13050 (A SQL Injection vulnerability exists in Zoho ManageEngine
Applications ...)
+ TODO: check
+CVE-2018-13048
+ RESERVED
+CVE-2018-13047
+ RESERVED
+CVE-2018-13046
+ RESERVED
+CVE-2018-13045
+ RESERVED
CVE-2018-XXXX [accountservice: insufficient path check in
user_change_icon_file_authorized_cb()]
- accountsservice <unfixed> (low)
[stretch] - accountsservice <no-dsa> (Minor issue)
NOTE: http://www.openwall.com/lists/oss-security/2018/07/02/2
-CVE-2018-13054 [possible symlink attack in cinnamon-settings-users.py]
+CVE-2018-13054 (An issue was discovered in Cinnamon 1.9.2 through 3.8.6. The
...)
- cinnamon <unfixed>
NOTE: https://github.com/linuxmint/Cinnamon/pull/7683
NOTE: https://bugzilla.suse.com/show_bug.cgi?id=1083067
-CVE-2018-13049 [SQL Injection in inc/search.class.php]
+CVE-2018-13049 (The constructSQL function in inc/search.class.php in GLPI
9.2.x through ...)
- glpi <removed> (unimportant)
NOTE: https://github.com/glpi-project/glpi/issues/4270
NOTE:
https://github.com/trasher/glpi/commit/5c58d4c57be7b1e0c1de925b97f22d4468291d41
@@ -344,25 +452,22 @@ CVE-2018-12898
RESERVED
CVE-2018-12897
RESERVED
-CVE-2018-12896
- RESERVED
+CVE-2018-12896 (An issue was discovered in the Linux kernel through 4.17.3. An
Integer ...)
+ TODO: check
CVE-2018-12895 (WordPress through 4.9.6 allows Author users to execute
arbitrary code ...)
- wordpress <unfixed> (bug #902876)
NOTE:
https://blog.ripstech.com/2018/wordpress-file-delete-to-code-execution/
CVE-2018-12894
RESERVED
-CVE-2018-12893
- RESERVED
+CVE-2018-12893 (An issue was discovered in Xen through 4.10.x. One of the
fixes in ...)
{DSA-4236-1}
- xen <unfixed>
NOTE: https://xenbits.xen.org/xsa/advisory-265.html
-CVE-2018-12892
- RESERVED
+CVE-2018-12892 (An issue was discovered in Xen 4.7 through 4.10.x. libxl fails
to pass ...)
{DSA-4236-1}
- xen <unfixed>
NOTE: https://xenbits.xen.org/xsa/advisory-266.html
-CVE-2018-12891
- RESERVED
+CVE-2018-12891 (An issue was discovered in Xen through 4.10.x. Certain PV MMU
...)
{DSA-4236-1}
- xen <unfixed>
NOTE: https://xenbits.xen.org/xsa/advisory-264.html
@@ -1247,14 +1352,14 @@ CVE-2018-12579
CVE-2018-12578 (There is a heap-based buffer overflow in bmp_compress1_row in
...)
- sam2p <removed>
NOTE: https://github.com/pts/sam2p/issues/39
-CVE-2018-12577
- RESERVED
-CVE-2018-12576
- RESERVED
-CVE-2018-12575
- RESERVED
-CVE-2018-12574
- RESERVED
+CVE-2018-12577 (The Ping and Traceroute features on TP-Link TL-WR841N v13
00000001 ...)
+ TODO: check
+CVE-2018-12576 (TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119
...)
+ TODO: check
+CVE-2018-12575 (On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build
171019 ...)
+ TODO: check
+CVE-2018-12574 (CSRF exists for all actions in the web interface on TP-Link
TL-WR841N ...)
+ TODO: check
CVE-2018-12573
RESERVED
CVE-2018-12572
@@ -1385,10 +1490,10 @@ CVE-2018-12531 (An issue was discovered in MetInfo
6.0.0. install\index.php allo
NOT-FOR-US: MetInfo
CVE-2018-12530 (An issue was discovered in MetInfo 6.0.0.
admin/app/batch/csvup.php ...)
NOT-FOR-US: MetInfo
-CVE-2018-12529
- RESERVED
-CVE-2018-12528
- RESERVED
+CVE-2018-12529 (An issue was discovered on Intex N150 devices. The router
firmware ...)
+ TODO: check
+CVE-2018-12528 (An issue was discovered on Intex N150 devices. The
backup/restore ...)
+ TODO: check
CVE-2018-12527
RESERVED
CVE-2018-12526 (Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have
a default ...)
@@ -1445,8 +1550,8 @@ CVE-2018-12501 (Nagios Fusion before 4.1.4 has XSS, aka
TPS#13332-13335. ...)
NOT-FOR-US: Nagios Fusion
CVE-2018-12500
RESERVED
-CVE-2018-12499
- RESERVED
+CVE-2018-12499 (The Motorola MBP853 firmware does not correctly validate
server ...)
+ TODO: check
CVE-2018-12498 (spider.admincp.php in iCMS v7.0.8 has SQL Injection via the id
...)
NOT-FOR-US: iCMS
CVE-2018-12497
@@ -1712,8 +1817,8 @@ CVE-2018-12428
RESERVED
CVE-2018-12427
RESERVED
-CVE-2018-12426
- RESERVED
+CVE-2018-12426 (The WP Live Chat Support Pro plugin before 8.0.07 for
WordPress is ...)
+ TODO: check
CVE-2018-12425
RESERVED
CVE-2018-12424
@@ -3136,7 +3241,7 @@ CVE-2018-1002200 [arbitrary file write vulnerability /
arbitrary code execution
- plexus-archiver 3.6.0-1 (bug #900953)
NOTE: https://github.com/codehaus-plexus/plexus-archiver/pull/87
NOTE:
https://github.com/codehaus-plexus/plexus-archiver/commit/58bc24e465c0842981692adbf6d75680298989de
-CVE-2018-1000204 (Linux Kernel version 3.18 to 4.16 incorrectly handles an
SG_IO ioctl ...)
+CVE-2018-1000204 (** DISPUTED ** Linux Kernel version 3.18 to 4.16 incorrectly
handles ...)
- linux 4.16.12-1
NOTE: Fixed by:
https://git.kernel.org/linus/a45b599ad808c3c982fdcdc12b0b8611c2f92824
CVE-2018-1000203 (Soar Labs Soar Coin version up to and including git commit
...)
@@ -5396,6 +5501,7 @@ CVE-2018-10965
CVE-2018-10964
RESERVED
CVE-2018-10963 (The TIFFWriteDirectorySec() function in tif_dirwrite.c in
LibTIFF ...)
+ {DLA-1411-1}
- tiff 4.0.9-6 (bug #898348)
[stretch] - tiff <no-dsa> (Minor issue)
- tiff3 <removed>
@@ -5620,8 +5726,7 @@ CVE-2018-10875
RESERVED
- ansible <unfixed>
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1596533
-CVE-2018-10874
- RESERVED
+CVE-2018-10874 (In ansible it was found that inventory variables are loaded
from ...)
- ansible <unfixed>
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1596528
CVE-2018-10873
@@ -5675,11 +5780,9 @@ CVE-2018-10857
- git-annex 6.20180626-1
NOTE: http://www.openwall.com/lists/oss-security/2018/06/26/4
NOTE:
https://git-annex.branchable.com/security/CVE-2018-10857_and_CVE-2018-10859/
-CVE-2018-10856
- RESERVED
+CVE-2018-10856 (It has been discovered that podman before version 0.6.1 does
not drop ...)
NOT-FOR-US: Podman
-CVE-2018-10855 [Failed tasks do not honour no_log option allowing for secrets
to be disclosed in logs]
- RESERVED
+CVE-2018-10855 (Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not
honor the ...)
- ansible 2.5.5+dfsg-1
[jessie] - ansible <not-affected> (vulnerable code not present)
NOTE: https://github.com/ansible/ansible/pull/41414
@@ -5716,8 +5819,7 @@ CVE-2018-10845
RESERVED
CVE-2018-10844
RESERVED
-CVE-2018-10843
- RESERVED
+CVE-2018-10843 (source-to-image component of Openshift Container Platform
before ...)
NOT-FOR-US: source-to-image in OpenShift
CVE-2018-10842
RESERVED
@@ -6336,8 +6438,8 @@ CVE-2018-10598
RESERVED
CVE-2018-10597 (IntelliVue Patient Monitors MP Series (including ...)
NOT-FOR-US: Philips
-CVE-2018-10596
- RESERVED
+CVE-2018-10596 (Medtronic 2090 CareLink Programmer all versions The affected
product ...)
+ TODO: check
CVE-2018-10595 (A vulnerability in ReadA version 1.1.0.2 and previous allows
an ...)
NOT-FOR-US: BD Kiestra and InoqulA systems
CVE-2018-10594 (Delta Industrial Automation COMMGR from Delta Electronics
versions ...)
@@ -7691,10 +7793,10 @@ CVE-2018-10078 (Cross-site scripting (XSS)
vulnerability in Geist WatchDog Conso
NOT-FOR-US: Geist WatchDog Console
CVE-2018-10077 (XML external entity (XXE) vulnerability in Geist WatchDog
Console ...)
NOT-FOR-US: Geist WatchDog Console
-CVE-2018-10076
- RESERVED
-CVE-2018-10075
- RESERVED
+CVE-2018-10076 (An issue was discovered in Zoho ManageEngine EventLog Analyzer
11.12. ...)
+ TODO: check
+CVE-2018-10075 (Cross-site scripting (XSS) vulnerability in Zoho ManageEngine
EventLog ...)
+ TODO: check
CVE-2018-10073 (joyplus-cms 1.6.0 has XSS in manager/admin_vod.php via the
keyword ...)
NOT-FOR-US: joyplus-cms
CVE-2018-10072 (windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows
attackers ...)
@@ -9474,8 +9576,8 @@ CVE-2018-9278
RESERVED
CVE-2018-9277
RESERVED
-CVE-2018-9276
- RESERVED
+CVE-2018-9276 (An issue was discovered in PRTG Network Monitor before 18.2.39.
An ...)
+ TODO: check
CVE-2018-9275 (In check_user_token in util.c in the Yubico PAM module (aka
pam_yubico) ...)
- yubico-pam <unfixed> (bug #896491)
[stretch] - yubico-pam <no-dsa> (Minor issue)
@@ -10543,7 +10645,7 @@ CVE-2018-8907
CVE-2018-8906 (dsmall v20180320 has XSS via a crafted street address to ...)
NOT-FOR-US: dsmall
CVE-2018-8905 (In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the
function ...)
- {DLA-1378-1 DLA-1377-1}
+ {DLA-1411-1 DLA-1378-1 DLA-1377-1}
- tiff 4.0.9-6 (bug #893806)
[stretch] - tiff <postponed> (Can be fixed along in a future DSA)
- tiff3 <removed>
@@ -10644,12 +10746,12 @@ CVE-2018-8872 (In Schneider Electric Triconex Tricon
MP model 3008 firmware vers
NOT-FOR-US: Schneider
CVE-2018-8871 (In Delta Electronics Automation TPEditor version 1.89 or prior,
...)
NOT-FOR-US: Delta Electronics Automation TPEditor
-CVE-2018-8870
- RESERVED
+CVE-2018-8870 (Medtronic MyCareLink Patient Monitor, 24950 MyCareLink Monitor,
all ...)
+ TODO: check
CVE-2018-8869 (In Lantech IDS 2102 2.0 and prior, nearly all input fields
allow for ...)
NOT-FOR-US: Lantech
-CVE-2018-8868
- RESERVED
+CVE-2018-8868 (Medtronic MyCareLink Patient Monitor, 24950 MyCareLink Monitor,
all ...)
+ TODO: check
CVE-2018-8867 (In GE PACSystems RX3i CPE305/310 version 9.20 and prior, RX3i
CPE330 ...)
NOT-FOR-US: GE PACSystems
CVE-2018-8866 (In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker
on an ...)
@@ -12620,8 +12722,7 @@ CVE-2018-8041
RESERVED
CVE-2018-8040
RESERVED
-CVE-2018-8039
- RESERVED
+CVE-2018-8039 (It is possible to configure Apache CXF to use the
com.sun.net.ssl ...)
NOT-FOR-US: Apache CXF
CVE-2018-8038
RESERVED
@@ -14390,7 +14491,7 @@ CVE-2018-7458
CVE-2018-7457
RESERVED
CVE-2018-7456 (A NULL Pointer Dereference occurs in the function
TIFFPrintDirectory in ...)
- {DLA-1347-1 DLA-1346-1}
+ {DLA-1411-1 DLA-1347-1 DLA-1346-1}
- tiff 4.0.9-5 (bug #891288)
[stretch] - tiff <postponed> (Can be fixed along in a future DSA)
- tiff3 <removed>
@@ -19823,7 +19924,7 @@ CVE-2018-5785 (In OpenJPEG 2.3.0, there is an integer
overflow caused by an ...)
- openjpeg2 <unfixed> (low; bug #888533)
NOTE: https://github.com/uclouvain/openjpeg/issues/1057
CVE-2018-5784 (In LibTIFF 4.0.9, there is an uncontrolled resource consumption
in the ...)
- {DLA-1391-1}
+ {DLA-1411-1 DLA-1391-1}
- tiff 4.0.9-4 (bug #890441)
[stretch] - tiff <postponed> (Minor issue, revisit once fixed upstream)
- tiff3 <removed>
@@ -32256,8 +32357,8 @@ CVE-2018-1251
RESERVED
CVE-2018-1250
RESERVED
-CVE-2018-1249
- RESERVED
+CVE-2018-1249 (Dell EMC iDRAC9 versions prior to 3.21.21.21 did not enforce
the use ...)
+ TODO: check
CVE-2018-1248 (RSA Authentication Manager Security Console, Operation Console
and ...)
NOT-FOR-US: RSA Authentication Mamager
CVE-2018-1247 (RSA Authentication Manager Security Console, version 8.3 and
earlier, ...)
@@ -32266,10 +32367,10 @@ CVE-2018-1246
RESERVED
CVE-2018-1245
RESERVED
-CVE-2018-1244
- RESERVED
-CVE-2018-1243
- RESERVED
+CVE-2018-1244 (Dell EMC iDRAC7/iDRAC8, versions prior to 2.60.60.60, and
iDRAC9 ...)
+ TODO: check
+CVE-2018-1243 (Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8,
versions prior ...)
+ TODO: check
CVE-2018-1242 (Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint
for VMs ...)
NOT-FOR-US: Dell
CVE-2018-1241 (Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint
for VMs ...)
@@ -32330,8 +32431,8 @@ CVE-2018-1214 (Dell EMC SupportAssist Enterprise
version 1.1 creates a local Win
NOT-FOR-US: EMC
CVE-2018-1213 (Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1,
8.0.1.0 - ...)
NOT-FOR-US: Dell
-CVE-2018-1212
- RESERVED
+CVE-2018-1212 (The web-based diagnostics console in Dell EMC iDRAC6
(Monolithic ...)
+ TODO: check
CVE-2018-1211 (Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a
path ...)
NOT-FOR-US: Dell EMC iDRAC7/iDRAC8
CVE-2018-1210
@@ -32791,8 +32892,7 @@ CVE-2018-1114 [File descriptor leak caused by
JarURLConnection.getLastModified()
NOTE: https://issues.jboss.org/browse/UNDERTOW-1338
NOTE:
https://github.com/undertow-io/undertow/commit/882d5884f2614944a0c2ae69bafd9d13bfc5b64a
NOTE: https://bugs.openjdk.java.net/browse/JDK-6956385
-CVE-2018-1113
- RESERVED
+CVE-2018-1113 (setup before version 2.11.4-1.fc28 in Fedora and Red Hat
Enterprise ...)
NOT-FOR-US: Red Hat specific CVE assignment for Red Hat / Fedora setups
(nologin listed in /etc/shells violates security expectations)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1571094
CVE-2018-1112 (glusterfs server before versions 3.10.12, 4.0.2 is vulnerable
when ...)
@@ -32936,8 +33036,7 @@ CVE-2018-1082 (A flaw was found in Moodle 3.4 to 3.4.1,
and 3.3 to 3.3.4. If a u
- moodle <removed>
CVE-2018-1081 (A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to
3.2.7, ...)
- moodle <removed>
-CVE-2018-1080 [Mishandled ACL configuration in AAclAuthz.java reverses rules
that allow and deny access]
- RESERVED
+CVE-2018-1080 (Dogtag PKI, through version 10.6.1, has a vulnerability in ...)
[experimental] - dogtag-pki 10.6.0-2
- dogtag-pki <unfixed> (bug #893690)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1556657
@@ -33280,10 +33379,10 @@ CVE-2017-17319 (Huawei P9 smartphones with the
versions before EVA-AL10C00B399SP
NOT-FOR-US: Huawei
CVE-2017-17318 (Huawei MBB (Mobile Broadband) products E5771h-937 with the
versions ...)
NOT-FOR-US: Huawei
-CVE-2017-17317
- RESERVED
-CVE-2017-17316
- RESERVED
+CVE-2017-17317 (Common Open Policy Service Protocol (COPS) module in Huawei
USG6300 ...)
+ TODO: check
+CVE-2017-17316 (Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30
...)
+ TODO: check
CVE-2017-17315 (Huawei DP300 V500R002C00; RP200 V600R006C00; TE30 V100R001C10;
...)
NOT-FOR-US: Huawei
CVE-2017-17314 (Huawei DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10,
...)
@@ -33564,8 +33663,8 @@ CVE-2017-17177
RESERVED
CVE-2017-17176
RESERVED
-CVE-2017-17175
- RESERVED
+CVE-2017-17175 (Short Message Service (SMS) module of Mate 9 Pro Huawei smart
phones ...)
+ TODO: check
CVE-2017-17174
RESERVED
CVE-2017-17173 (Due to insufficient parameters verification GPU driver of Mate
9 Pro ...)
@@ -35090,8 +35189,7 @@ CVE-2018-0501
RESERVED
CVE-2018-0500
RESERVED
-CVE-2018-0499 [Incomplete HTML escaping by Xapian::MSet::snippet()]
- RESERVED
+CVE-2018-0499 (A cross-site scripting vulnerability in ...)
- xapian-core 1.4.6-1 (bug #902886)
NOTE:
https://lists.xapian.org/pipermail/xapian-discuss/2018-July/009652.html
CVE-2018-0498
@@ -52695,7 +52793,7 @@ CVE-2017-11615 (A sandbox escape in the Lua interface
in Wube Factorio before 0.
CVE-2017-11614 (MEDHOST Connex contains hard-coded credentials that are used
for ...)
NOT-FOR-US: MEDHOST Connex
CVE-2017-11613 (In LibTIFF 4.0.8, there is a denial of service vulnerability
in the ...)
- {DLA-1391-1}
+ {DLA-1411-1 DLA-1391-1}
- tiff 4.0.9-5 (low; bug #869823)
[stretch] - tiff <postponed> (Minor issue, revisit once fixed upstream)
- tiff3 <removed>
@@ -80666,8 +80764,7 @@ CVE-2017-2616 [Sending SIGKILL to other processes with
root privileges via su]
- coreutils 8.20-1 (unimportant)
NOTE: Coreutils: Removed from source in
https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=928dd737
NOTE: and not installed by default since 2007.
-CVE-2017-2615 [display: cirrus: oob access while doing bitblt copy backward
mode]
- RESERVED
+CVE-2017-2615 (Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA
emulator ...)
{DLA-845-1 DLA-842-1}
- qemu 1:2.8+dfsg-3 (low; bug #854731)
NOTE: Introduced with:
http://git.qemu.org/?p=qemu.git;a=commit;h=d3532a0db02296e687711b8cdc7791924efccea0
(which was the fix for CVE-2014-8106)
@@ -190647,7 +190744,7 @@ CVE-2012-5576 (Multiple stack-based buffer overflows
in file-xwd.c in the X Wind
NOTE: Upstream fix
http://git.gnome.org/browse/gimp/commit/?id=2873262fccba12af144ed96ed91be144d92ff2e1
NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=687392
NOTE: http://www.openwall.com/lists/oss-security/2012/11/21/2
-CVE-2012-5575 (Apache CFX 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and
2.7.x ...)
+CVE-2012-5575 (Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and
2.7.x ...)
NOT-FOR-US: Apache CXF
CVE-2012-5574 (lib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows
remote ...)
NOT-FOR-US: Symfony
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e9cb9f3537eee1847353f8fa7f5324cbb9cb4b7c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e9cb9f3537eee1847353f8fa7f5324cbb9cb4b7c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
