Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
bd37ca79 by Salvatore Bonaccorso at 2018-07-11T16:42:48+02:00
Add new cups CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -19150,8 +19150,9 @@ CVE-2018-6555
        RESERVED
 CVE-2018-6554
        RESERVED
-CVE-2018-6553
+CVE-2018-6553 [AppArmor profile issue in cups]
        RESERVED
+       - cups <unfixed>
 CVE-2018-6552 (Apport does not properly handle crashes originating from a PID 
...)
        [experimental] - apport <unfixed>
        NOTE: apport only in experimental, so we cannot track this in 
security-tracker
@@ -25799,14 +25800,22 @@ CVE-2018-4185
        RESERVED
 CVE-2018-4184 (An issue was discovered in certain Apple products. macOS before 
...)
        NOT-FOR-US: Apple (Speech component)
-CVE-2018-4183
+CVE-2018-4183 [cups-exec Sandbox Bypass Due to Profile Misconfiguration]
        RESERVED
-CVE-2018-4182
+       - cups <unfixed>
+       NOTE: Fixed by: 
https://github.com/apple/cups/commit/d47f6aec436e0e9df6554436e391471097686ecc
+CVE-2018-4182 [cups-exec Sandbox Bypass Due to Insecure Error Handling]
        RESERVED
-CVE-2018-4181
+       - cups <unfixed>
+       NOTE: Fixed by: 
https://github.com/apple/cups/commit/d47f6aec436e0e9df6554436e391471097686ecc
+CVE-2018-4181 [Limited Local File Reads as Root via cupsd.conf Include 
Directive]
        RESERVED
-CVE-2018-4180
+       - cups <unfixed>
+       NOTE: Fixed by: 
https://github.com/apple/cups/commit/d47f6aec436e0e9df6554436e391471097686ecc
+CVE-2018-4180 [Local Privilege Escalation to Root in dnssd Backend 
(CUPS_SERVERBIN)]
        RESERVED
+       - cups <unfixed>
+       NOTE: Fixed by: 
https://github.com/apple/cups/commit/d47f6aec436e0e9df6554436e391471097686ecc
 CVE-2018-4179
        RESERVED
 CVE-2018-4178



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/bd37ca799f2a1db84074a6858f9d4af807c58784

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/bd37ca799f2a1db84074a6858f9d4af807c58784
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to