[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2017-15914/borgbackup

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
80398bba by Salvatore Bonaccorso at 2018-02-09T10:24:43+01:00
Add CVE-2017-15914/borgbackup

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -21767,7 +21767,9 @@ CVE-2017-15916
 CVE-2017-15915
 	RESERVED
 CVE-2017-15914 (Incorrect implementation of access controls allows remote users to ...)
-	TODO: check
+	- borgbackup 1.1.3-1
+	[stretch] - borgbackup <not-affected> (Only affects 1.1.0, 1.1.1 and 1.1.2 releases)
+	NOTE: https://borgbackup.readthedocs.io/en/stable/changes.html#version-1-1-3-2017-11-27
 CVE-2017-15913 (The Installer in Whale allows DLL hijacking. ...)
 	NOT-FOR-US: Installer in Whale
 CVE-2017-15912



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/80398bbad8a648a2bb5a3910166a5783ecbc2193

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/80398bbad8a648a2bb5a3910166a5783ecbc2193
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180209/c1ebbd94/attachment.html>