[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add information for CVE-2018-1000069/freeplane

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6a79a4fa by Salvatore Bonaccorso at 2018-03-15T14:51:49+01:00
Add information for CVE-2018-1000069/freeplane

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -3776,7 +3776,8 @@ CVE-2018-1000071 (roundcube version 1.3.4 and earlier contains an Insecure Permi
 CVE-2018-1000070 (Bitmessage PyBitmessage version v0.6.2 (and introduced in or after ...)
 	NOT-FOR-US: PyBitmessage
 CVE-2018-1000069 (FreePlane version 1.5.9 and earlier contains a XML External Entity ...)
-	- freeplane <unfixed>
+	- freeplane 1.6.6-1
+	NOTE: https://www.freeplane.org/wiki/index.php/XML_External_Entity_vulnerability_in_map_parser
 CVE-2018-7279 (A remote code execution issue was discovered in AlienVault USM and ...)
 	NOT-FOR-US: AlienVault
 CVE-2018-7278 (An issue was discovered on RLE Protocol Converter FDS-PC / FDS-PC-DP ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6a79a4fac221c26748d1b59633d6bf6a79f31caf

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6a79a4fac221c26748d1b59633d6bf6a79f31caf
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180315/13765324/attachment.html>