Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
ef76d426 by security tracker role at 2018-04-09T08:10:20+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,3 +1,11 @@
+CVE-2018-9858
+       RESERVED
+CVE-2018-9857 (PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the 
search field ...)
+       TODO: check
+CVE-2018-9856 (Kotti before 1.3.2 and 2.x before 2.0.0b2 has CSRF in the local 
roles ...)
+       TODO: check
+CVE-2018-9855
+       RESERVED
 CVE-2018-9854
        RESERVED
 CVE-2018-9853
@@ -1080,7 +1088,7 @@ CVE-2016-10719
        RESERVED
 CVE-2018-9330 (register.jsp in Coremail XT3.0 allows stored XSS, as 
demonstrated by ...)
        NOT-FOR-US: Coremail XT3.0
-CVE-2018-9329 (The Bitdefender Antivirus 6.2.19.890 component, as configured 
for AV ...)
+CVE-2018-9329 (** DISPUTED ** The Bitdefender Antivirus 6.2.19.890 component, 
as ...)
        NOT-FOR-US: Bitdefender Antivirus
 CVE-2018-9328 (PHP Scripts Mall Redbus Clone Script 3.0.6 has XSS via the 
ter_from ...)
        NOT-FOR-US: PHP Scripts Mall Redbus Clone Script
@@ -2594,7 +2602,7 @@ CVE-2018-8764 (Roland Gruber Softwareentwicklung LDAP 
Account Manager before 6.3
        NOTE: https://www.ldap-account-manager.org/lamcms/node/354
        NOTE: 
https://github.com/LDAPAccountManager/lam/commit/993751c7ff0faa07b7c028295152cf9c20349688
 CVE-2018-8763 (Roland Gruber Softwareentwicklung LDAP Account Manager before 
6.3 has ...)
-       {DSA-4165-1}
+       {DSA-4165-1 DLA-1342-1}
        - ldap-account-manager 6.3-1
        NOTE: 
https://github.com/LDAPAccountManager/lam/commit/f1d7aec5fc4aaf516e1d8a6f0eb3082050553302
        NOTE: 
https://github.com/LDAPAccountManager/lam/commit/16fc7f7e8603c5cb7c129cfbf97fc572b9b8740c
@@ -8507,7 +8515,6 @@ CVE-2018-6596 (webhooks/base.py in Anymail (aka 
django-anymail) before 1.2.1 is 
 CVE-2018-6595
        RESERVED
 CVE-2018-6594 (lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 
generates ...)
-       {DLA-1283-1}
        - pycryptodome 3.4.11-1 (bug #889998)
        - python-crypto <unfixed> (bug #889999)
        [stretch] - python-crypto <no-dsa> (Minor issue)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/ef76d4267cb302af58c3e4592cfdd659eeda391a

---
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/ef76d4267cb302af58c3e4592cfdd659eeda391a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

Reply via email to