Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
770b1da5 by Salvatore Bonaccorso at 2018-01-15T17:41:56+01:00
CVE-2018-5702/transmission assigned
- - - - -
2 changed files:
- data/CVE/list
- data/DSA/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -697,10 +697,8 @@ CVE-2016-10706 (The Jetpack plugin before 4.0.3 for
WordPress has XSS via a craf
NOT-FOR-US: WordPress plugin jetpack
CVE-2016-10705 (The Jetpack plugin before 4.0.4 for WordPress has XSS via the
Likes ...)
NOT-FOR-US: WordPress plugin jetpack
-CVE-2018-XXXX [rpc session-id mechanism design flaw results in RCE]
+CVE-2018-5702 [rpc session-id mechanism design flaw results in RCE]
- transmission <unfixed> (bug #886990)
- [stretch] - transmission 2.92-2+deb9u1
- [jessie] - transmission 2.84-0.2+deb8u1
NOTE: http://www.openwall.com/lists/oss-security/2018/01/12/1
NOTE: https://github.com/transmission/transmission/pull/468
NOTE: Proposed patch:
https://patch-diff.githubusercontent.com/raw/transmission/transmission/pull/468.diff
=====================================
data/DSA/list
=====================================
--- a/data/DSA/list
+++ b/data/DSA/list
@@ -1,4 +1,5 @@
[14 Jan 2018] DSA-4087-1 transmission - security update
+ {CVE-2018-5702}
[jessie] - transmission 2.84-0.2+deb8u1
[stretch] - transmission 2.92-2+deb9u1
[13 Jan 2018] DSA-4086-1 libxml2 - security update
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/770b1da5683991a886cc85d0749808049d98a03c
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/770b1da5683991a886cc85d0749808049d98a03c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
