[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Mark CVE-2018-7567 as unimportant

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8af7d532 by Salvatore Bonaccorso at 2018-03-07T20:37:49+01:00
Mark CVE-2018-7567 as unimportant

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -553,9 +553,11 @@ CVE-2018-1000105
 CVE-2018-1000104
 	NOT-FOR-US: Jenkins plugin
 CVE-2018-7567 (In the Admin Package Manager in Open Ticket Request System (OTRS) 5.0.0 ...)
-	- otrs2 <unfixed>
-	[stretch] - otrs2 <no-dsa> (non-free not supported)
+	- otrs2 <unfixed> (unimportant)
 	NOTE: PoC https://0day.today/exploit/29938
+	NOTE: Admin Package Manager works as designed and warns if a package is beeing
+	NOTE: installed which is not verified by the OTRS Group. Responsiblity of the
+	NOTE: respective admin to check packages before installation.
 CVE-2018-7566 [ALSA: seq: Fix racy pool initializations]
 	RESERVED
 	- linux <unfixed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8af7d5325c6691507a920ae9a5f7e06b50818a9e

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8af7d5325c6691507a920ae9a5f7e06b50818a9e
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180307/766983dc/attachment.html>