[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-1000028/linux
Salvatore Bonaccorso
carnil at debian.org
Sun Jan 28 18:34:53 UTC 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
ee7f076a by Salvatore Bonaccorso at 2018-01-28T19:34:30+01:00
Add CVE-2018-1000028/linux
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -2658,6 +2658,12 @@ CVE-2017-18024 (AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the de
NOT-FOR-US: AvantFAX
CVE-2017-18023 (Office Tracker 11.2.5 has XSS via the logincount parameter to the ...)
NOT-FOR-US: Office Tracker
+CVE-2018-1000028 [nfsd: auth: Fix gid sorting when rootsquash enabled]
+ - linux <unfixed>
+ [stretch] - linux <not-affected> (Vulnerable code introduced later)
+ [jessie] - linux <not-affected> (Vulnerable code introduced later)
+ [wheezy] - linux <not-affected> (Vulnerable code introduced later)
+ NOTE: Fixed by: https://git.kernel.org/linus/1995266727fa8143897e89b55f5d3c79aa828420
CVE-2018-1000022 [Password protect the JSONRPC interface]
- electrum 3.0.5-1 (bug #886683)
[stretch] - electrum <ignored> (Unable to connect to current Etherum servers and thus not exploitable, scheduled for removal at #887412)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ee7f076af08a711e85242d7b3891b0a18f4057b6
---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ee7f076af08a711e85242d7b3891b0a18f4057b6
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180128/e496ecd0/attachment-0001.html>
More information about the Secure-testing-commits
mailing list