[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] 2 commits: Add one more yii CVE

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
60d01741 by Salvatore Bonaccorso at 2018-03-22T16:08:12+01:00
Add one more yii CVE

- - - - -
5d7cb9c7 by Salvatore Bonaccorso at 2018-03-22T16:08:13+01:00
Rename source package tracking from yii-framework to the itp'ed choosed one yii (later)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -4291,7 +4291,7 @@ CVE-2018-7271 (An issue was discovered in MetInfo 6.0.0. In install/install.php 
 CVE-2018-7270
 	RESERVED
 CVE-2018-7269 (The findByCondition function in framework/db/ActiveRecord.php in Yii ...)
-	TODO: check
+	- yii <itp> (bug #597899)
 CVE-2018-7268
 	RESERVED
 CVE-2018-7267
@@ -54172,7 +54172,7 @@ CVE-2017-7274 (The r_pkcs7_parse_cms function in libr/util/r_pkcs7.c in radare2 
 	NOTE: https://github.com/radare/radare2/commit/7ab66cca5bbdf6cb2d69339ef4f513d95e532dbf
 	NOTE: https://github.com/radare/radare2/issues/7152
 CVE-2017-7271 (Reflected Cross-site scripting (XSS) vulnerability in Yii Framework ...)
-	- yii-framework <itp> (bug #597899)
+	- yii <itp> (bug #597899)
 CVE-2017-7270
 	RESERVED
 CVE-2017-7273 (The cp_report_fixup function in drivers/hid/hid-cypress.c in the Linux ...)
@@ -120377,7 +120377,7 @@ CVE-2015-3399
 CVE-2015-3398
 	RESERVED
 CVE-2015-3397 (Cross-site scripting (XSS) vulnerability in Yii Framework before 2.0.4 ...)
-	- yii-framework <itp> (bug #597899)
+	- yii <itp> (bug #597899)
 CVE-2015-3396
 	RESERVED
 CVE-2015-3395 (The msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/2402043f8470d208c2743e22f979ba5c56225371...5d7cb9c77dc5c47e4efaff47c75f54f759c3f2dc

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/2402043f8470d208c2743e22f979ba5c56225371...5d7cb9c77dc5c47e4efaff47c75f54f759c3f2dc
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180322/b9ce3073/attachment.html>