Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
679c919d by Salvatore Bonaccorso at 2019-07-04T21:48:18Z
Add CVE-2019-13239/glpi
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -71,7 +71,9 @@ CVE-2019-13241 (FlightCrew v0.9.2 and older are vulnerable to
a directory traver
CVE-2019-13240
RESERVED
CVE-2019-13239 (inc/user.class.php in GLPI before 9.4.3 allows XSS via a user
picture. ...)
- TODO: check
+ - glpi <removed> (unimportant)
+ NOTE:
https://github.com/glpi-project/glpi/commit/c2aa7a7cd6af28be3809acc7e7842d2d2008c0fb
+ NOTE: Only supported behind an authenticated HTTP zone
CVE-2019-13238 (An issue was discovered in Bento4 1.5.1.0. A memory allocation
failure ...)
NOT-FOR-US: Bento4
CVE-2019-13237
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/679c919dce07e6519631b9eb2dd36c11f32b1a5d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/679c919dce07e6519631b9eb2dd36c11f32b1a5d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
