[Git][security-tracker-team/security-tracker][master] Add CVE-2018-11039/libspring-java

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
146567b9 by Salvatore Bonaccorso at 2018-06-17T08:58:22+02:00
Add CVE-2018-11039/libspring-java

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -3702,8 +3702,10 @@ CVE-2018-11040 [ross-domain requests via JSONP through AbstractJsonpResponseBody
 	RESERVED
 	- libspring-java <unfixed>
 	NOTE: https://pivotal.io/security/cve-2018-11040
-CVE-2018-11039
+CVE-2018-11039 [Cross Site Tracing (XST) if vulnerable to XSS]
 	RESERVED
+	- libspring-java <unfixed>
+	NOTE: https://pivotal.io/security/cve-2018-11039
 CVE-2017-18270 (In the Linux kernel before 4.13.5, a local user could create keyrings ...)
 	- linux 4.13.10-1
 	[stretch] - linux 4.9.65-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/146567b9e52c0f132c12ddfb71a3f429a9683035

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/146567b9e52c0f132c12ddfb71a3f429a9683035
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180617/f64fcd34/attachment.html>