Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
97e368d4 by Salvatore Bonaccorso at 2019-10-14T14:50:36Z
Add CVE-2019-14287/sudo
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9646,8 +9646,10 @@ CVE-2019-14288 (An issue was discovered in Xpdf 4.01.01.
There is an Integer ove
NOTE:
https://gitlab.freedesktop.org/poppler/poppler/commit/55db66c69fd56826b8523710046deab1a8d14ba2
NOTE:
https://gitlab.freedesktop.org/poppler/poppler/commit/22c4701d5f7be0010ee4519daa546fba5ab7ac13
NOTE: Issue correspond to CVE-2017-9776 for src:poppler
-CVE-2019-14287
+CVE-2019-14287 [Potential bypass of Runas user restrictions]
RESERVED
+ - sudo <unfixed>
+ NOTE: https://www.sudo.ws/alerts/minus_1_uid.html
CVE-2019-14286 (In app/webroot/js/event-graph.js in MISP 2.4.111, a stored XSS
vulnera ...)
NOT-FOR-US: MISP
CVE-2019-14285
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/97e368d4531d3ad3df317998f733e2a1d94bf8cb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/97e368d4531d3ad3df317998f733e2a1d94bf8cb
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
