[Git][security-tracker-team/security-tracker][master] 2 commits: Add glusterfs to dsa-needed list
Salvatore Bonaccorso
carnil at debian.org
Mon Apr 30 21:15:11 BST 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
184f4d1f by Salvatore Bonaccorso at 2018-04-30T22:12:15+02:00
Add glusterfs to dsa-needed list
- - - - -
693bc8f0 by Salvatore Bonaccorso at 2018-04-30T22:14:53+02:00
Process NFUs
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,11 +1,11 @@
CVE-2018-10573 (interface/fax/fax_dispatch.php in OpenEMR before 5.0.1 allows remote ...)
- TODO: check
+ NOT-FOR-US: OpenEMR
CVE-2018-10572 (interface/patient_file/letter.php in OpenEMR before 5.0.1 allows remote ...)
- TODO: check
+ NOT-FOR-US: OpenEMR
CVE-2018-10571 (Multiple reflected cross-site scripting (XSS) vulnerabilities in ...)
- TODO: check
+ NOT-FOR-US: OpenEMR
CVE-2018-10570 (Frog CMS 0.9.5 has XSS in /install/index.php via the ...)
- TODO: check
+ NOT-FOR-US: Frog CMS
CVE-2018-10569
RESERVED
CVE-2018-10568
@@ -2885,7 +2885,7 @@ CVE-2018-1000152 (An improper authorization vulnerability exists in Jenkins vSph
CVE-2018-1000153 (A cross-site request forgery vulnerability exists in Jenkins vSphere ...)
NOT-FOR-US: Jenkins plugin
CVE-2018-9310 (An issue was discovered in MagniComp SysInfo before 10-H81 if setuid ...)
- TODO: check
+ NOT-FOR-US: MagniComp SysInfo
CVE-2018-9309 (An issue was discovered in zzcms 8.2. It allows SQL injection via the ...)
NOT-FOR-US: zzcms
CVE-2018-9308
@@ -4115,7 +4115,7 @@ CVE-2018-8841
CVE-2018-8840 (A remote attacker could send a carefully crafted packet in InduSoft ...)
NOT-FOR-US: InduSoft
CVE-2018-8839 (Delta PMSoft versions 2.10 and prior have multiple stack-based buffer ...)
- TODO: check
+ NOT-FOR-US: Delta PMSoft
CVE-2018-8838 (A weakness in access controls in CENTUM CS 1000 all versions, CENTUM ...)
NOT-FOR-US: CENTUM
CVE-2018-8837 (Processing specially crafted .pm3 files in Advantech WebAccess HMI ...)
=====================================
data/dsa-needed.txt
=====================================
--- a/data/dsa-needed.txt
+++ b/data/dsa-needed.txt
@@ -25,6 +25,8 @@ ffmpeg/stable
gitlab
Pirate Praveen will prepare updates
--
+glusterfs
+--
graphicsmagick
--
imagemagick
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/2c32a71a724f3a5d1116393812c2dc9f2b67f214...693bc8f0b16fb52ff43e7030b6647dba45bf89f7
---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/2c32a71a724f3a5d1116393812c2dc9f2b67f214...693bc8f0b16fb52ff43e7030b6647dba45bf89f7
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180430/6bda411e/attachment-0001.html>
More information about the debian-security-tracker-commits
mailing list