Sebastien Delafond pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
3803387f by Sébastien Delafond at 2019-04-08T08:24:40Z
Reserve DSA-4427-1 for samba (CVE-2019-3880)
- - - - -
52c62481 by Sébastien Delafond at 2019-04-08T08:24:41Z
Add recent samba issues (CVE-2019-3870, CVE-2019-3880)
- - - - -
2 changed files:
- data/CVE/list
- data/DSA/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -17197,8 +17197,10 @@ CVE-2019-3882 [DoS through vfio/type1 DMA mappings]
NOTE: Fixed by:
https://git.kernel.org/linus/492855939bdb59c6f947b0b5b44af9ad82b7e38c
CVE-2019-3881
RESERVED
-CVE-2019-3880
- RESERVED
+CVE-2019-3880 (Save registry file outside share as unprivileged user)
+ {DSA-4427-1}
+ - samba <unfixed>
+ NOTE: https://www.samba.org/samba/security/CVE-2019-3880.html
CVE-2019-3879 (It was discovered that in the ovirt's REST API before version
4.3.2.1, ...)
NOT-FOR-US: ovirt-engine
CVE-2019-3878 (A vulnerability was found in mod_auth_mellon before v0.14.2. If
Apache ...)
@@ -17230,8 +17232,10 @@ CVE-2019-3871 (A vulnerability was found in PowerDNS
Authoritative Server before
NOTE: https://github.com/PowerDNS/pdns/issues/7573
NOTE:
https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-03.html
NOTE: Patches: https://downloads.powerdns.com/patches/2019-03/
-CVE-2019-3870
- RESERVED
+CVE-2019-3870 (During the provision of a new Active Directory DC, some files
in the ...)
+ - samba <unfixed>
+ [stretch] - samba <not-affected> (Vulnerable code not present)
+ NOTE: https://www.samba.org/samba/security/CVE-2019-3870.html
CVE-2019-3869 (When running Tower before 3.4.3 on OpenShift or Kubernetes,
applicatio ...)
NOT-FOR-US: Ansible Tower
CVE-2019-3868
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,6 @@
+[08 Apr 2019] DSA-4427-1 samba - security update
+ {CVE-2019-3880}
+ [stretch] - samba 2:4.5.16+dfsg-1+deb9u1
[07 Apr 2019] DSA-4426-1 tryton-server - security update
{CVE-2019-10868}
[stretch] - tryton-server 4.2.1-2+deb9u1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/2fbda38d41060ffa23305d54346659eb64ff197e...52c62481cdec2b24711122ab32f97940b1ef1822
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/2fbda38d41060ffa23305d54346659eb64ff197e...52c62481cdec2b24711122ab32f97940b1ef1822
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
