[Git][security-tracker-team/security-tracker][master] Cleanup entries to be included in DSA

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6164cfb2 by Salvatore Bonaccorso at 2018-06-03T15:52:11+02:00
Cleanup entries to be included in DSA

- - - - -


2 changed files:

- data/CVE/list
- data/next-point-update.txt


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -9984,8 +9984,6 @@ CVE-2018-1000119 (Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earli
 	NOTE: https://github.com/sinatra/sinatra/commit/8aa6c42ef724f93ae309fb7c5668e19ad547eceb
 CVE-2018-1000115 (Memcached version 1.5.5 contains an Insufficient Control of Network ...)
 	- memcached 1.5.6-1
-	[stretch] - memcached <no-dsa> (Minor issue; Debian defaults to listen only on localhost)
-	[jessie] - memcached <no-dsa> (Minor issue; Debian defaults to listen only on localhost)
 	[wheezy] - memcached <no-dsa> (Minor issue; Debian defaults to listen only on localhost)
 	NOTE: Upstream 1.5.6 disables by default the UDP protocol
 	NOTE: https://github.com/memcached/memcached/commit/dbb7a8af90054bf4ef51f5814ef7ceb17d83d974
@@ -52075,8 +52073,6 @@ CVE-2017-9952
 CVE-2017-9951 (The try_read_command function in memcached.c in memcached before 1.4.39 ...)
 	{DLA-1033-1}
 	- memcached 1.5.0-1 (bug #868701)
-	[stretch] - memcached <no-dsa> (Minor issue)
-	[jessie] - memcached <no-dsa> (Minor issue)
 	NOTE: https://www.twistlock.com/2017/07/13/cve-2017-9951-heap-overflow-memcached-server-1-4-38-twistlock-vulnerability-report/
 	NOTE: https://github.com/memcached/memcached/commit/328629445c71e6c17074f6e9e0e3ef585b58f167
 CVE-2017-9950


=====================================
data/next-point-update.txt
=====================================
--- a/data/next-point-update.txt
+++ b/data/next-point-update.txt
@@ -6,10 +6,6 @@ CVE-2017-5715
 	[stretch] - nvidia-graphics-drivers 384.111-4~deb9u1
 CVE-2017-12424
 	[stretch] - shadow 1:4.4-4.1+deb9u1
-CVE-2017-9951
-	[stretch] - memcached 1.4.33-1+deb9u1
-CVE-2018-1000115
-	[stretch] - memcached 1.4.33-1+deb9u1
 CVE-2015-XXXX [busybox: pointer misuse unziping files]
 	[stretch] - busybox 1:1.22.0-19+deb9u1
 	NOTE: For #803097



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6164cfb299c8e2c2c75377f0311c98600a35c12b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6164cfb299c8e2c2c75377f0311c98600a35c12b
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180603/d013eb15/attachment.html>