Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8af7d532 by Salvatore Bonaccorso at 2018-03-07T20:37:49+01:00
Mark CVE-2018-7567 as unimportant
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -553,9 +553,11 @@ CVE-2018-1000105
CVE-2018-1000104
NOT-FOR-US: Jenkins plugin
CVE-2018-7567 (In the Admin Package Manager in Open Ticket Request System
(OTRS) 5.0.0 ...)
- - otrs2 <unfixed>
- [stretch] - otrs2 <no-dsa> (non-free not supported)
+ - otrs2 <unfixed> (unimportant)
NOTE: PoC https://0day.today/exploit/29938
+ NOTE: Admin Package Manager works as designed and warns if a package is
beeing
+ NOTE: installed which is not verified by the OTRS Group. Responsiblity
of the
+ NOTE: respective admin to check packages before installation.
CVE-2018-7566 [ALSA: seq: Fix racy pool initializations]
RESERVED
- linux <unfixed>
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/8af7d5325c6691507a920ae9a5f7e06b50818a9e
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/8af7d5325c6691507a920ae9a5f7e06b50818a9e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
