Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4e7beedb by Moritz Muehlenhoff at 2019-03-11T19:29:19Z
hadoop ITP issue
mark two remaining systemd issues for stretch as ignored
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -31268,8 +31268,8 @@ CVE-2018-16889 (Ceph does not properly sanitize
encryption keys in debug logging
NOTE: http://tracker.ceph.com/issues/37847
NOTE:
https://github.com/ceph/ceph/commit/ba55e2a96c9dfcc7aa2311431beaaa23cb05c30d
CVE-2018-16888 (It was discovered systemd does not correctly check the content
of ...)
- - systemd 237-1
- [stretch] - systemd <no-dsa> (Minor issue)
+ - systemd 237-1 (low)
+ [stretch] - systemd <ignored> (Minor issue, too intrusive to backport)
[jessie] - systemd <no-dsa> (low priority because this is inherently a
bug in the PID file logic)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1662867
NOTE: Upstream issue: https://github.com/systemd/systemd/issues/6632
@@ -44761,6 +44761,7 @@ CVE-2018-11768
RESERVED
CVE-2018-11767
RESERVED
+ - hadoop <itp> (bug #793644)
CVE-2018-11766 (In Apache Hadoop 2.7.4 to 2.7.6, the security fix for
CVE-2016-6811 is ...)
- hadoop <itp> (bug #793644)
CVE-2018-11765
@@ -58006,8 +58007,8 @@ CVE-2018-6956
CVE-2018-6955
RESERVED
CVE-2018-6954 (systemd-tmpfiles in systemd through 237 mishandles symlinks
present in ...)
- - systemd 238-1 (bug #890779)
- [stretch] - systemd <postponed> (Minor issue, revisit if/when fixed
upstream)
+ - systemd 238-1 (low; bug #890779)
+ [stretch] - systemd <ignored> (Minor issue, too intrusive to backport)
[jessie] - systemd <postponed> (Minor issue, revisit if/when fixed
upstream)
[wheezy] - systemd <not-affected> (/etc/tmpfiles.d not supported in
Wheezy)
NOTE: https://github.com/systemd/systemd/issues/7986
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/4e7beedb71cc50cb8453d26e9d5d9be665c1d750
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/4e7beedb71cc50cb8453d26e9d5d9be665c1d750
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
