[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso carnil at debian.org
Sat Jan 13 21:10:23 UTC 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f5f3cf3e by security tracker role at 2018-01-13T21:10:18+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,3 +1,7 @@
+CVE-2018-5683
+	RESERVED
+CVE-2017-18030
+	RESERVED
 CVE-2018-5682 (PrestaShop 1.7.2.4 allow user enumeration via the Reset Password ...)
 	NOT-FOR-US: PrestaShop
 CVE-2018-5681 (PrestaShop 1.7.2.4 has XSS via source-code editing on the "Pages > Edit ...)
@@ -13463,8 +13467,7 @@ CVE-2018-0488
 	RESERVED
 CVE-2018-0487
 	RESERVED
-CVE-2018-0486
-	RESERVED
+CVE-2018-0486 (Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service ...)
 	{DSA-4085-1}
 	- xmltooling <unfixed>
 	[stretch] - xmltooling <not-affected> (Xerces is configured to disallow DTD use)
@@ -19209,7 +19212,7 @@ CVE-2017-15413
 	[wheezy] - chromium-browser <end-of-life> (Not supported in Wheezy)
 CVE-2017-15412 [use after free]
 	RESERVED
-	{DLA-1211-1}
+	{DSA-4086-1 DLA-1211-1}
 	- libxml2 2.9.4+dfsg1-5.2 (bug #883790)
 	NOTE: https://bugs.chromium.org/p/chromium/issues/detail?id=727039
 	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=783160 (not public)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f5f3cf3e51c8306957046c3217c06ef81093deba

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f5f3cf3e51c8306957046c3217c06ef81093deba
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180113/f1bd211b/attachment.html>


More information about the Secure-testing-commits mailing list