Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ec1956e3 by security tracker role at 2018-02-23T09:10:13+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,3 +1,17 @@
+CVE-2018-7422
+ RESERVED
+CVE-2018-7421
+ RESERVED
+CVE-2018-7420
+ RESERVED
+CVE-2018-7419
+ RESERVED
+CVE-2018-7418
+ RESERVED
+CVE-2018-7417
+ RESERVED
+CVE-2018-7416
+ RESERVED
CVE-2018-XXXX [heap-buffer-overflow in freexl.c:3912
read_mini_biff_next_record]
- freexl 1.0.5-1
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1547892
@@ -972,14 +986,17 @@ CVE-2018-7053 (An issue was discovered in Irssi before
1.0.7 and 1.1.x before 1.
NOTE: https://irssi.org/security/irssi_sa_2018_02.txt
NOTE: Fixed by:
https://github.com/irssi/irssi/commit/84f03e01467b90a4251987b32b2813ee976b357c
CVE-2018-7052 (An issue was discovered in Irssi before 1.0.7 and 1.1.x before
1.1.1. ...)
+ {DLA-1289-1}
- irssi <unfixed> (bug #890676)
NOTE: https://irssi.org/security/irssi_sa_2018_02.txt
NOTE: Fixed by:
https://github.com/irssi/irssi/commit/5b5bfef03596d95079c728f65f523570dd7b03aa
CVE-2018-7051 (An issue was discovered in Irssi before 1.0.7 and 1.1.x before
1.1.1. ...)
+ {DLA-1289-1}
- irssi <unfixed> (bug #890677)
NOTE: https://irssi.org/security/irssi_sa_2018_02.txt
NOTE: Fixed by:
https://github.com/irssi/irssi/commit/e32e9d63c67ab95ef0576154680a6c52334b97af
CVE-2018-7050 (An issue was discovered in Irssi before 1.0.7 and 1.1.x before
1.1.1. A ...)
+ {DLA-1289-1}
- irssi <unfixed> (bug #890678)
NOTE: https://irssi.org/security/irssi_sa_2018_02.txt
NOTE: Fixed by:
https://github.com/irssi/irssi/commit/e91da9e4098e449dc36eaa15354aff67650e7703
@@ -2565,10 +2582,10 @@ CVE-2018-6491
RESERVED
CVE-2018-6490
RESERVED
-CVE-2018-6489
- RESERVED
-CVE-2018-6488
- RESERVED
+CVE-2018-6489 (XML External Entity (XXE) vulnerability in Micro Focus Project
and ...)
+ TODO: check
+CVE-2018-6488 (Arbitrary Code Execution vulnerability in Micro Focus Universal
CMDB, ...)
+ TODO: check
CVE-2018-6487 (Remote Disclosure of Information in Micro Focus Universal CMDB
...)
NOT-FOR-US: Micro Focus Universal CMDB Foundation Software
CVE-2018-6486 (XML External Entity (XXE) vulnerability in Micro Focus Fortify
Audit ...)
@@ -5761,7 +5778,7 @@ CVE-2018-1000028 (Linux kernel version after commit
bdcf0a423ea1 - 4.15-rc4+, 4.
NOTE: Introducing commit backported to 4.14.8 and 4.9.76. But Debian
stretch
NOTE: did never contain the vulnerable code alone without the fix.
CVE-2018-1000027 (The Squid Software Foundation Squid HTTP Caching Proxy
version prior ...)
- {DLA-1267-1 DLA-1266-1}
+ {DSA-4122-1 DLA-1267-1 DLA-1266-1}
[experimental] - squid 4.0.23-1~exp8
- squid <removed>
- squid3 3.5.27-1 (bug #888720)
@@ -5770,7 +5787,7 @@ CVE-2018-1000027 (The Squid Software Foundation Squid
HTTP Caching Proxy version
NOTE: Squid 4:
http://www.squid-cache.org/Versions/v4/changesets/SQUID-2018_2.patch
NOTE: http://www.squid-cache.org/Advisories/SQUID-2018_2.txt
CVE-2018-1000024 (The Squid Software Foundation Squid HTTP Caching Proxy
version 3.0 to ...)
- {DLA-1266-1}
+ {DSA-4122-1 DLA-1266-1}
[experimental] - squid 4.0.23-1~exp8
- squid <removed>
[wheezy] - squid <not-affected> (Not affected according to upstream
advisory)
@@ -20503,8 +20520,8 @@ CVE-2018-0017
RESERVED
CVE-2018-0016
RESERVED
-CVE-2018-0015
- RESERVED
+CVE-2018-0015 (A malicious user with unrestricted access to the AppFormix
application ...)
+ TODO: check
CVE-2018-0014 (Juniper Networks ScreenOS devices do not pad Ethernet packets
with ...)
NOT-FOR-US: Juniper
CVE-2018-0013 (A local file inclusion vulnerability in Juniper Networks Junos
Space ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/ec1956e33bf33b4e918f50d4c5c3a10f33cdea62
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/ec1956e33bf33b4e918f50d4c5c3a10f33cdea62
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
