[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add information for CVE-2018-1000089

[Scott Kitterman]

Scott Kitterman pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4642d5d0 by Scott Kitterman at 2018-03-10T10:11:12-05:00
Add information for CVE-2018-1000089

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -2138,8 +2138,11 @@ CVE-2018-1000091
 	RESERVED
 CVE-2018-1000090
 	RESERVED
-CVE-2018-1000089
+CVE-2018-1000089 [WEBHOOK_AUTHORIZATION secret disclosure when debug enabled]
 	RESERVED
+	- django-anymail 1.4-1
+	NOTE: https://github.com/anymail/django-anymail/commit/1a6086f2b58478d71f89bf27eb034ed81aefe5ef
+	NOTE: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=890097
 CVE-2018-1000088 [Stored XSS vulnerability]
 	RESERVED
 	- ruby-doorkeeper <unfixed> (bug #891069)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4642d5d0d05f1c528691715aed47f85f717c01c5

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4642d5d0d05f1c528691715aed47f85f717c01c5
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180310/d44ee474/attachment-0001.html>