[Git][security-tracker-team/security-tracker][master] Add new cups CVEs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bd37ca79 by Salvatore Bonaccorso at 2018-07-11T16:42:48+02:00
Add new cups CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -19150,8 +19150,9 @@ CVE-2018-6555
 	RESERVED
 CVE-2018-6554
 	RESERVED
-CVE-2018-6553
+CVE-2018-6553 [AppArmor profile issue in cups]
 	RESERVED
+	- cups <unfixed>
 CVE-2018-6552 (Apport does not properly handle crashes originating from a PID ...)
 	[experimental] - apport <unfixed>
 	NOTE: apport only in experimental, so we cannot track this in security-tracker
@@ -25799,14 +25800,22 @@ CVE-2018-4185
 	RESERVED
 CVE-2018-4184 (An issue was discovered in certain Apple products. macOS before ...)
 	NOT-FOR-US: Apple (Speech component)
-CVE-2018-4183
+CVE-2018-4183 [cups-exec Sandbox Bypass Due to Profile Misconfiguration]
 	RESERVED
-CVE-2018-4182
+	- cups <unfixed>
+	NOTE: Fixed by: https://github.com/apple/cups/commit/d47f6aec436e0e9df6554436e391471097686ecc
+CVE-2018-4182 [cups-exec Sandbox Bypass Due to Insecure Error Handling]
 	RESERVED
-CVE-2018-4181
+	- cups <unfixed>
+	NOTE: Fixed by: https://github.com/apple/cups/commit/d47f6aec436e0e9df6554436e391471097686ecc
+CVE-2018-4181 [Limited Local File Reads as Root via cupsd.conf Include Directive]
 	RESERVED
-CVE-2018-4180
+	- cups <unfixed>
+	NOTE: Fixed by: https://github.com/apple/cups/commit/d47f6aec436e0e9df6554436e391471097686ecc
+CVE-2018-4180 [Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)]
 	RESERVED
+	- cups <unfixed>
+	NOTE: Fixed by: https://github.com/apple/cups/commit/d47f6aec436e0e9df6554436e391471097686ecc
 CVE-2018-4179
 	RESERVED
 CVE-2018-4178



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/bd37ca799f2a1db84074a6858f9d4af807c58784

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/bd37ca799f2a1db84074a6858f9d4af807c58784
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180711/17503bf8/attachment.html>