Author: hlieberman Date: 2017-08-07 20:50:37 +0000 (Mon, 07 Aug 2017) New Revision: 54404
Modified: data/CVE/list Log: Mark CVE-2017-7481 as unimportant Modified: data/CVE/list =================================================================== --- data/CVE/list 2017-08-07 20:27:15 UTC (rev 54403) +++ data/CVE/list 2017-08-07 20:50:37 UTC (rev 54404) @@ -14275,10 +14275,10 @@ CVE-2017-7474 (It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not ...) NOT-FOR-US: Keycloak CVE-2017-7473 (Ansible versions 2.2.3 and earlier are vulnerable to an information ...) - - ansible <unfixed> (bug #863583) + - ansible <unfixed> (unimportant; bug #863583) NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1440912 - NOTE: Possibly https://github.com/ansible/ansible/issues/22505 - NOTE: but needs confirmation. + NOTE: Upstream issue is https://github.com/ansible/ansible/issues/22505 + NOTE: but upstream denies that it is a bug. CVE-2017-7472 (The KEYS subsystem in the Linux kernel before 4.10.13 allows local ...) {DLA-922-1} - linux 4.9.25-1 _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits