[Git][security-tracker-team/security-tracker][master] Add CVE-2018-1128/ceph

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5638e3b7 by Salvatore Bonaccorso at 2018-07-10T08:11:12+02:00
Add CVE-2018-1128/ceph

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -34382,8 +34382,11 @@ CVE-2018-1129 [cephx uses weak signatures]
 	- ceph <unfixed>
 	NOTE: http://tracker.ceph.com/issues/24837
 	NOTE: https://github.com/ceph/ceph/commit/8f396cf35a3826044b089141667a196454c0a587
-CVE-2018-1128
+CVE-2018-1128 [cephx protocol is vulnerable to replay attack]
 	RESERVED
+	- ceph <unfixed>
+	NOTE: http://tracker.ceph.com/issues/24836
+	NOTE: https://github.com/ceph/ceph/commit/5ead97120e07054d80623dada90a5cc764c28468
 CVE-2018-1127
 	RESERVED
 	NOT-FOR-US: tendrl-api



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5638e3b7739ae2f53ba048428ef8f4a0b4d47fac

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5638e3b7739ae2f53ba048428ef8f4a0b4d47fac
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180710/c1b1f974/attachment.html>