[Git][security-tracker-team/security-tracker][master] Cleanup CVE-2017-7473

Salvatore Bonaccorso carnil at debian.org
Wed May 16 21:16:23 BST 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
476bbfd7 by Salvatore Bonaccorso at 2018-05-16T22:13:35+02:00
Cleanup CVE-2017-7473

Further analysis by its CNA schowed there is no security issue here,
further investigation determined that there was a secure method for
using the directive.

Closes: #863583

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -60208,10 +60208,6 @@ CVE-2017-7474 (It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not 
 	NOT-FOR-US: Keycloak
 CVE-2017-7473
 	REJECTED
-	- ansible <unfixed> (unimportant; bug #863583)
-	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1440912
-	NOTE: Upstream issue is https://github.com/ansible/ansible/issues/22505
-	NOTE: but upstream denies that it is a bug.
 CVE-2017-7472 (The KEYS subsystem in the Linux kernel before 4.10.13 allows local ...)
 	{DLA-922-1}
 	- linux 4.9.25-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/476bbfd700a2b87473ebcdb06fb9eff31d06bb67

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/476bbfd700a2b87473ebcdb06fb9eff31d06bb67
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180516/2cef0930/attachment.html>


More information about the debian-security-tracker-commits mailing list