Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0c6dc65c by Salvatore Bonaccorso at 2019-03-30T07:44:34Z
Demote severity for open-vm-tools issue to unimportant
The symlink race is neutralized by the kernel hardening as discussed
with the maintainer.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -705,8 +705,9 @@ CVE-2019-10278
CVE-2019-10277
RESERVED
CVE-2019-XXXX [insecure handling of /tmp/VMwareDnD]
- - open-vm-tools 2:10.3.10-1 (bug #925959)
+ - open-vm-tools 2:10.3.10-1 (bug #925959; unimportant)
NOTE:
https://github.com/vmware/open-vm-tools/commit/e88f91b00a715b79255de6576506d80ecfdb064c
+ NOTE: Neutralised by kernel hardening
CVE-2019-10276 (Western Bridge Cobub Razor 0.8.0 has a file upload
vulnerability via t ...)
NOT-FOR-US: Western Bridge Cobub Razor
CVE-2019-10275
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c6dc65cf54e340178ec53b0e82cbde12f7abdfb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c6dc65cf54e340178ec53b0e82cbde12f7abdfb
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
