Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2345c4fc by Moritz Muehlenhoff at 2018-07-15T23:56:52+02:00
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -42071,31 +42071,31 @@ CVE-2016-10518 (A vulnerability was found in the ping
functionality of the ws mo
NOTE: https://nodesecurity.io/advisories/67
NOTE: Nodefs not covered by security support
CVE-2015-9243 (When server level, connection level or route level CORS
configurations ...)
- TODO: check
+ NOT-FOR-US: hapi
CVE-2015-9242 (Certain input strings when passed to new Date() or Date.parse()
in ...)
- TODO: check
+ NOT-FOR-US: ecstatic
CVE-2015-9241 (Certain input passed into the If-Modified-Since or
Last-Modified ...)
- TODO: check
+ NOT-FOR-US: hapi
CVE-2015-9240 (Due to a bug in the the default sign in functionality in the
keystone ...)
- TODO: check
+ NOT-FOR-US: keystone node module
CVE-2015-9239 (ansi2html is vulnerable to regular expression denial of service
...)
- TODO: check
+ NOT-FOR-US: ansi2html
CVE-2015-9238 (secure-compare 3.0.0 and below do not actually compare two
strings ...)
- TODO: check
+ NOT-FOR-US: secure-compare node module
CVE-2015-9237
RESERVED
CVE-2015-9236 (Hapi versions less than 11.0.0 implement CORS incorrectly and
allowed ...)
- TODO: check
+ NOT-FOR-US: hapi
CVE-2015-9235 (In jsonwebtoken node module before 4.2.2 it is possible for an
...)
NOT-FOR-US: jsonwebtoken node module
CVE-2014-10068 (The inert directory handler in inert node module before 1.1.1
always ...)
- TODO: check
+ NOT-FOR-US: inert
CVE-2014-10067 (paypal-ipn before 3.0.0 uses the `test_ipn` parameter (which
is set by ...)
- TODO: check
+ NOT-FOR-US: paypal-ipn
CVE-2014-10066 (Versions less than 0.1.4 of the static file server module
fancy-server ...)
- TODO: check
+ NOT-FOR-US: fancy-server
CVE-2014-10065 (Certain input when passed into remarkable before 1.4.1 will
bypass the ...)
- TODO: check
+ NOT-FOR-US: remarkable
CVE-2014-10064 (The qs module before 1.0.0 does not have an option or default
for ...)
TODO: check
CVE-2017-15994 (rsync 3.1.3-development before 2017-10-24 mishandles archaic
...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/2345c4fcd59077f6c9799dbf42f3f0043da769e7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/2345c4fcd59077f6c9799dbf42f3f0043da769e7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
