[Git][security-tracker-team/security-tracker][master] 2 commits: Add glusterfs to dsa-needed list

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
184f4d1f by Salvatore Bonaccorso at 2018-04-30T22:12:15+02:00
Add glusterfs to dsa-needed list

- - - - -
693bc8f0 by Salvatore Bonaccorso at 2018-04-30T22:14:53+02:00
Process NFUs

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,11 +1,11 @@
 CVE-2018-10573 (interface/fax/fax_dispatch.php in OpenEMR before 5.0.1 allows remote ...)
-	TODO: check
+	NOT-FOR-US: OpenEMR
 CVE-2018-10572 (interface/patient_file/letter.php in OpenEMR before 5.0.1 allows remote ...)
-	TODO: check
+	NOT-FOR-US: OpenEMR
 CVE-2018-10571 (Multiple reflected cross-site scripting (XSS) vulnerabilities in ...)
-	TODO: check
+	NOT-FOR-US: OpenEMR
 CVE-2018-10570 (Frog CMS 0.9.5 has XSS in /install/index.php via the ...)
-	TODO: check
+	NOT-FOR-US: Frog CMS
 CVE-2018-10569
 	RESERVED
 CVE-2018-10568
@@ -2885,7 +2885,7 @@ CVE-2018-1000152 (An improper authorization vulnerability exists in Jenkins vSph
 CVE-2018-1000153 (A cross-site request forgery vulnerability exists in Jenkins vSphere ...)
 	NOT-FOR-US: Jenkins plugin
 CVE-2018-9310 (An issue was discovered in MagniComp SysInfo before 10-H81 if setuid ...)
-	TODO: check
+	NOT-FOR-US: MagniComp SysInfo
 CVE-2018-9309 (An issue was discovered in zzcms 8.2. It allows SQL injection via the ...)
 	NOT-FOR-US: zzcms
 CVE-2018-9308
@@ -4115,7 +4115,7 @@ CVE-2018-8841
 CVE-2018-8840 (A remote attacker could send a carefully crafted packet in InduSoft ...)
 	NOT-FOR-US: InduSoft
 CVE-2018-8839 (Delta PMSoft versions 2.10 and prior have multiple stack-based buffer ...)
-	TODO: check
+	NOT-FOR-US: Delta PMSoft
 CVE-2018-8838 (A weakness in access controls in CENTUM CS 1000 all versions, CENTUM ...)
 	NOT-FOR-US: CENTUM
 CVE-2018-8837 (Processing specially crafted .pm3 files in Advantech WebAccess HMI ...)


=====================================
data/dsa-needed.txt
=====================================
--- a/data/dsa-needed.txt
+++ b/data/dsa-needed.txt
@@ -25,6 +25,8 @@ ffmpeg/stable
 gitlab
   Pirate Praveen will prepare updates
 --
+glusterfs
+--
 graphicsmagick
 --
 imagemagick



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/2c32a71a724f3a5d1116393812c2dc9f2b67f214...693bc8f0b16fb52ff43e7030b6647dba45bf89f7

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/2c32a71a724f3a5d1116393812c2dc9f2b67f214...693bc8f0b16fb52ff43e7030b6647dba45bf89f7
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180430/6bda411e/attachment-0001.html>