Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0c0b7c6a by Salvatore Bonaccorso at 2018-10-31T09:39:08Z
Track some nextcloud issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5827,15 +5827,15 @@ CVE-2018-16468 (In the Loofah gem for Ruby, through
v2.2.2, unsanitized JavaScri
- ruby-loofah <unfixed> (bug #912398)
NOTE: https://github.com/flavorjones/loofah/issues/154
CVE-2018-16467 (A missing check in Nextcloud Server prior to 14.0.0 could give
...)
- TODO: check
+ - nextcloud <itp> (bug #835086)
CVE-2018-16466 (Improper revalidation of permissions in Nextcloud Server prior
to ...)
- TODO: check
+ - nextcloud <itp> (bug #835086)
CVE-2018-16465 (Missing state in Nextcloud Server prior to 14.0.0 would not
enforce ...)
- TODO: check
+ - nextcloud <itp> (bug #835086)
CVE-2018-16464 (A missing access check in Nextcloud Server prior to 14.0.0
could lead ...)
- TODO: check
+ - nextcloud <itp> (bug #835086)
CVE-2018-16463 (A bug causing session fixation in Nextcloud Server prior to
14.0.0, ...)
- TODO: check
+ - nextcloud <itp> (bug #835086)
CVE-2018-16462 (A command injection vulnerability in the
apex-publish-static-files npm ...)
TODO: check
CVE-2018-16461 (A command injection vulnerability in libnmapp package for
versions ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c0b7c6a7b55be1da56bcd0bc990b79f0a2d0f44
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c0b7c6a7b55be1da56bcd0bc990b79f0a2d0f44
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
