[Git][security-tracker-team/security-tracker][master] Add CVE-2018-1129/ceph

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9b9c31bd by Salvatore Bonaccorso at 2018-07-10T08:09:47+02:00
Add CVE-2018-1129/ceph

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -34377,8 +34377,11 @@ CVE-2018-1130 (Linux kernel before version 4.16-rc7 is vulnerable to a null poin
 	{DLA-1392-1}
 	- linux 4.15.17-1
 	NOTE: Fixed by: https://git.kernel.org/linus/67f93df79aeefc3add4e4b31a752600f834236e2
-CVE-2018-1129
+CVE-2018-1129 [cephx uses weak signatures]
 	RESERVED
+	- ceph <unfixed>
+	NOTE: http://tracker.ceph.com/issues/24837
+	NOTE: https://github.com/ceph/ceph/commit/8f396cf35a3826044b089141667a196454c0a587
 CVE-2018-1128
 	RESERVED
 CVE-2018-1127



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9b9c31bde1ec3ff549da4d131fbd7c1a430bf910

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9b9c31bde1ec3ff549da4d131fbd7c1a430bf910
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180710/dddbf4cc/attachment.html>