[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-6508/puppet-module-puppetlabs-{apt, apache, mysql}

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
37bf3bdb by Salvatore Bonaccorso at 2018-02-08T07:38:52+01:00
Add CVE-2018-6508/puppet-module-puppetlabs-{apt,apache,mysql}

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -924,8 +924,18 @@ CVE-2018-6510
 	RESERVED
 CVE-2018-6509
 	RESERVED
-CVE-2018-6508
-	RESERVED
+CVE-2018-6508 [Unparameterized input in multiple modules can allow a remote user to execute arbitrary code]
+	RESERVED
+	- puppet-module-puppetlabs-apt <unfixed>
+	- puppet-module-puppetlabs-apache <unfixed>
+	- puppet-module-puppetlabs-mysql <unfixed>
+	NOTE: https://puppet.com/security/cve/CVE-2018-6508
+	NOTE: Issue in various puppet modules: facter_task, puppet_conf, apt, apache and mysql modules
+	NOTE: https://github.com/puppetlabs/puppetlabs-facter_task/commit/dd37c72e78c8a37e671e20becb05d6ceafdbd81c
+	NOTE: https://github.com/puppetlabs/puppetlabs-puppet_conf/commit/ba434605717e16d935cba45ab38ca5866780a36b
+	NOTE: https://github.com/puppetlabs/puppetlabs-apt/commit/81879be960d5723016e3d0b4ff155ee704261bbc
+	NOTE: https://github.com/puppetlabs/puppetlabs-apache/commit/81bc5119ceced1faa4bf261efa4b7cd3731ef3ef
+	NOTE: https://github.com/puppetlabs/puppetlabs-mysql/commit/da3684c79d5fe6ece826e087e8693c75ac40414c
 CVE-2018-6507
 	RESERVED
 CVE-2018-6506



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/37bf3bdbca629a210087dbdf02374510e448d941

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/37bf3bdbca629a210087dbdf02374510e448d941
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180208/f4a6d329/attachment.html>