Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e0133195 by Salvatore Bonaccorso at 2018-11-11T13:31:48Z
Add bug references for ceph issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -21246,7 +21246,7 @@ CVE-2018-10863
CVE-2018-10862 (WildFly Core before version 6.0.0.Alpha3 does not properly
validate ...)
- wildfly <itp> (bug #752018)
CVE-2018-10861 (A flaw was found in the way ceph mon handles user requests.
Any ...)
- - ceph <unfixed>
+ - ceph <unfixed> (bug #913470)
[jessie] - ceph <no-dsa> (Intrusive changes)
NOTE: http://tracker.ceph.com/issues/24838
NOTE:
https://github.com/ceph/ceph/commit/975528f632f73fbffa3f1fee304e3bbe3296cffc
@@ -49109,7 +49109,7 @@ CVE-2018-1129 (A flaw was found in the way signature
calculation was handled by
- linux <unfixed>
[jessie] - linux <not-affected> (Message signatures not implemented)
NOTE:
https://git.kernel.org/linus/cc255c76c70f7a87d97939621eae04b600d9f4a1
- - ceph <unfixed>
+ - ceph <unfixed> (bug #913472)
[jessie] - ceph <no-dsa> (Intrusive changes)
NOTE: http://tracker.ceph.com/issues/24837
NOTE:
https://github.com/ceph/ceph/commit/8f396cf35a3826044b089141667a196454c0a587
@@ -49117,7 +49117,7 @@ CVE-2018-1128 (It was found that cephx authentication
protocol did not verify ce
- linux <unfixed>
[jessie] - linux <ignored> (Protocol change is too difficult)
NOTE:
https://git.kernel.org/linus/6daca13d2e72bedaaacfc08f873114c9307d5aea
- - ceph <unfixed>
+ - ceph <unfixed> (bug #913471)
[jessie] - ceph <no-dsa> (Intrusive changes)
NOTE: http://tracker.ceph.com/issues/24836
NOTE:
https://github.com/ceph/ceph/commit/5ead97120e07054d80623dada90a5cc764c28468
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e013319502b2d20e8c93f3a86e46a521ad405863
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e013319502b2d20e8c93f3a86e46a521ad405863
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
