Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3df8c4ef by Salvatore Bonaccorso at 2018-12-12T20:31:20Z
Process some NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -25,7 +25,7 @@ CVE-2018-20102 (An out-of-bounds read in
dns_validate_dns_response in dns.c was
- haproxy <unfixed>
NOTE:
http://git.haproxy.org/?p=haproxy.git;a=commit;h=efbbdf72992cd20458259962346044cafd9331c0
CVE-2018-20101 (The codection "Import users from CSV with meta"
plugin before 1.12.1 ...)
- TODO: check
+ NOT-FOR-US: codection "Import users from CSV with meta" plugin for
WordPress
CVE-2018-20100
RESERVED
CVE-2018-20099 (There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header
of ...)
@@ -37,7 +37,7 @@ CVE-2018-20097 (There is a SEGV in
Exiv2::Internal::TiffParserWorker::findPrimar
CVE-2018-20096 (There is a heap-based buffer over-read in the
Exiv2::tEXtToDataBuf ...)
TODO: check
CVE-2018-20095 (An issue was discovered in EnsureCapacity in Core/Ap4Array.h
in Bento4 ...)
- TODO: check
+ NOT-FOR-US: Bento4
CVE-2018-20094 (An issue was discovered in XXL-CONF 1.6.0. There is a path
traversal ...)
TODO: check
CVE-2018-XXXX [response discrepancy information exposure]
@@ -102,7 +102,7 @@ CVE-2018-20066
CVE-2018-20065
RESERVED
CVE-2018-20064 (doorGets 7.0 allows remote attackers to write to arbitrary
files via ...)
- TODO: check
+ NOT-FOR-US: doorGets
CVE-2018-20063
RESERVED
CVE-2018-20062 (An issue was discovered in NoneCms V1.3.
thinkphp/library/think/App.php ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/3df8c4ef3bc80bc22ff16431af3a24ee590f84b1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/3df8c4ef3bc80bc22ff16431af3a24ee590f84b1
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
