[Git][security-tracker-team/security-tracker][master] Triage result.

[Ola Lundqvist]

Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5dcf7527 by Ola Lundqvist at 2018-05-10T21:03:12+02:00
Triage result.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -372,6 +372,7 @@ CVE-2018-10795 (Liferay 6.2.x and before has an FCKeditor configuration that all
 CVE-2017-18265 (Prosody before 0.10.0 allows remote attackers to cause a denial of ...)
 	{DSA-4198-1}
 	- prosody 0.10.0-1 (bug #875829)
+	[wheezy] - prosody <not-affected> (Vulnerable code not present)
 	NOTE: https://prosody.im/issues/issue/987
 CVE-2018-10794
 	RESERVED
@@ -441,6 +442,7 @@ CVE-2018-10769
 CVE-2018-10768 (There is a NULL pointer dereference in the AnnotPath::getCoordsLength ...)
 	- poppler 0.38.0-2
 	[jessie] - poppler <no-dsa> (Minor issue)
+	[wheezy] - poppler <not-affected> (Vulnerable code is not present)
 	NOTE: https://bugs.freedesktop.org/show_bug.cgi?id=106408
 	NOTE: Fixed by: https://cgit.freedesktop.org/poppler/poppler/commit/?id=942adfc25e7a00ac3cf032ced2d8949e99099f70 (poppler-0.37)
 CVE-2018-10767 (There is a stack-based buffer over-read in calling GLib in the function ...)
@@ -27097,6 +27099,7 @@ CVE-2018-1046 [stack-based buffer overflow in dnsreplay]
 	- pdns <unfixed> (bug #898255)
 	[stretch] - pdns <no-dsa> (local DoS when parsing untrusted files)
 	[jessie] - pdns <not-affected> (Vulnerable code not present)
+	[wheezy] - pdns <not-affected> (Vulnerable code not present)
 	NOTE: https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2018-02.html
 	NOTE: Fixed by https://github.com/PowerDNS/pdns/commit/f9c57c98da1b1007a51680629b667d57d9b702b8
 CVE-2018-1045 (In Moodle 3.x, there is XSS via a calendar event name. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5dcf75278135b9b913b86f318781776bc45b6556

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5dcf75278135b9b913b86f318781776bc45b6556
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180510/9ddee483/attachment.html>