[Git][security-tracker-team/security-tracker][master] Add CVE-2018-10861/ceph

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6b97cf7b by Salvatore Bonaccorso at 2018-07-10T08:17:26+02:00
Add CVE-2018-10861/ceph

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -7284,8 +7284,11 @@ CVE-2018-10863
 CVE-2018-10862
 	RESERVED
 	- wildfly <itp> (bug #752018)
-CVE-2018-10861
+CVE-2018-10861 [ceph-mon does not perform authorization on OSD pool ops]
 	RESERVED
+	- ceph <unfixed>
+	NOTE: http://tracker.ceph.com/issues/24838
+	NOTE: https://github.com/ceph/ceph/commit/975528f632f73fbffa3f1fee304e3bbe3296cffc
 CVE-2018-10860 (perl-archive-zip is vulnerable to a directory traversal in ...)
 	- libarchive-zip-perl <unfixed> (bug #902882)
 	NOTE: https://github.com/redhotpenguin/perl-Archive-Zip/pull/33



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6b97cf7b3f14475c34fd8572a86a7aff22ea027d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6b97cf7b3f14475c34fd8572a86a7aff22ea027d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180710/012957bf/attachment.html>