Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
680e2b12 by Salvatore Bonaccorso at 2018-01-11T06:46:18+01:00
Lower the lower bound for introducing versions for electrum issue
Change in 2.6.3->2.6.4 for the damon was fixing one part of the damon
relative to the jsonprc. In 2.6 the RequestHandler was moved to the
damon part so mark at least 2.6 as well as problematic. This might be
not fully correst still but is inline with the upstream advisory
claiming only versions starting from 2.6 are affected.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -91,7 +91,7 @@ CVE-2017-18023 (Office Tracker 11.2.5 has XSS via the
logincount parameter to th
NOT-FOR-US: Office Tracker
CVE-2018-XXXX [Password protect the JSONRPC interface]
- electrum 3.0.5-1 (bug #886683)
- [jessie] - electrum <not-affected> (Only affects >= 2.6.4)
+ [jessie] - electrum <not-affected> (Only affects >= 2.6)
NOTE: https://github.com/spesmilo/electrum/issues/3374
NOTE: http://www.openwall.com/lists/oss-security/2018/01/10/4
CVE-2018-5300
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/680e2b127c6d133f54e619511222da76e3ab05e7
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/680e2b127c6d133f54e619511222da76e3ab05e7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
