[Git][security-tracker-team/security-tracker][master] Add CVE-2018-15605/phpmyadmin

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b3ceb77f by Salvatore Bonaccorso at 2018-08-23T06:21:03Z
Add CVE-2018-15605/phpmyadmin

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -242,8 +242,12 @@ CVE-2018-15607 (In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/1255
 CVE-2018-15606
 	RESERVED
-CVE-2018-15605
+CVE-2018-15605 [PMASA-2018-5]
 	RESERVED
+	- phpmyadmin <not-affected> (Vulnerable code introduced later)
+	NOTE: https://www.phpmyadmin.net/security/PMASA-2018-5/
+	NOTE: Introduced by: https://github.com/phpmyadmin/phpmyadmin/commit/9404287ac09415b627b6fa68c7d04a13f7ef41e2
+	NOTE: Fixed by: https://github.com/phpmyadmin/phpmyadmin/commit/00d90b3ae415b31338f76263359467a9fbebd0a1
 CVE-2018-XXXX [security issue with the PASS command and duplicate server instances]
 	- charybdis 4.1.1-1 (bug #906879)
 	[stretch] - charybdis <not-affected> (Vulnerable code added later)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b3ceb77fcabd9b66896f50bbe2c81d02f76ea654

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b3ceb77fcabd9b66896f50bbe2c81d02f76ea654
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180823/bc398afc/attachment.html>