Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 0134df9d by Salvatore Bonaccorso at 2019-05-20T21:00:17Z Revert CVE-2018-12270 back to check Marking it as NFU as per "Valve Steam" was defintively prematurely, there is for instance src:steam in the archive which might be impacted by the issue. The CVE description and references are unfortunately not enlightening regarding if src;steam might be affected. Cf. https://github.com/VixusFoxy/CVE/wiki/CVE-2018-12270 - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -51272,7 +51272,7 @@ CVE-2018-12272 (xowl/request.php in Ximdex 4.0 has XSS via the content parameter CVE-2018-12271 (** DISPUTED ** An issue was discovered in the com.getdropbox.Dropbox a ...) NOT-FOR-US: com.getdropbox.Dropbox app for IOS CVE-2018-12270 (In Valve Steam 1528829181 BETA, it is possible to perform a homograph ...) - NOT-FOR-US: Valve Steam + TODO: check CVE-2018-12269 RESERVED CVE-2018-12268 (acccheck.pl in acccheck 0.2.1 allows Command Injection via shell metac ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0134df9d68d2c5618361d488590fe2737327fd6d -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0134df9d68d2c5618361d488590fe2737327fd6d You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
