Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fc3ae5c3 by Moritz Muehlenhoff at 2018-11-28T16:11:53Z
stretch triage
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -2818,7 +2818,8 @@ CVE-2018-19534
CVE-2018-19533
RESERVED
CVE-2018-19532 (A NULL pointer dereference vulnerability exists in the
function ...)
- - libpodofo <unfixed>
+ - libpodofo <unfixed> (low)
+ [stretch] - libpodofo <no-dsa> (Minor issue)
NOTE: https://sourceforge.net/p/podofo/tickets/32/
CVE-2018-19531 (HTTL (aka Hyper-Text Template Language) through 1.0.11 allows
remote ...)
TODO: check
@@ -2845,8 +2846,9 @@ CVE-2018-19521
CVE-2018-19520 (An issue was discovered in SDCMS 1.6 with PHP 5.x. ...)
NOT-FOR-US: SDCMS
CVE-2018-19519 (In tcpdump 4.9.2, a stack-based buffer over-read exists in the
...)
- - tcpdump <unfixed>
+ - tcpdump <unfixed> (unimportant)
NOTE: https://github.com/zyingp/temp/blob/master/tcpdump.md
+ NOTE: Crash in CLI tool, no security impact
CVE-2018-19516
RESERVED
CVE-2018-19515
=====================================
data/dsa-needed.txt
=====================================
@@ -50,7 +50,7 @@ smarty3
sssd
Maintainer prepared an update and proposed debdiff, acked for upload, but
update needs further testing before release.
--
-tiff
+tiff (jmm)
--
xen
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/fc3ae5c34dae0f2551dd0eb64818ba3a56b17f18
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/fc3ae5c34dae0f2551dd0eb64818ba3a56b17f18
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
