[Git][security-tracker-team/security-tracker][master] libzypp bugs

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1813af28 by Moritz Muehlenhoff at 2018-05-18T21:56:58+02:00
libzypp bugs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -54445,7 +54445,7 @@ CVE-2017-9271 (The commandline package update tool zypper writes HTTP proxy ...)
 CVE-2017-9270 (In cryptctl before version 2.0 a malicious server could send RPC ...)
 	NOT-FOR-US: SuSE cryptctl
 CVE-2017-9269 (In libzypp before August 2018 GPG keys attached to YUM repositories ...)
-	- libzypp <unfixed>
+	- libzypp <unfixed> (bug #899065)
 	[jessie] - libzypp <ignored> (Minor issue)
 CVE-2017-9268 (In the open build service before 201707022 the wipetrigger and rebuild ...)
 	- open-build-service <unfixed> (low)
@@ -60450,10 +60450,10 @@ CVE-2017-7438 (NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowe
 CVE-2017-7437 (NetIQ Privileged Account Manager before 3.1 Patch Update 3 allowed ...)
 	NOT-FOR-US: NetIQ Privileged Account Manager
 CVE-2017-7436 (In libzypp before 20170803 it was possible to retrieve unsigned ...)
-	- libzypp <unfixed>
+	- libzypp <unfixed> (bug #899065)
 	[jessie] - libzypp <ignored> (Minor issue)
 CVE-2017-7435 (In libzypp before 20170803 it was possible to add unsigned YUM ...)
-	- libzypp <unfixed>
+	- libzypp <unfixed> (bug #899065)
 	[jessie] - libzypp <ignored> (Minor issue)
 CVE-2017-7434 (In the JDBC driver of NetIQ Identity Manager before 4.6 sending out ...)
 	NOT-FOR-US: NetIQ Identity Manager



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1813af28a4e3ceb7456c345f4df001c38434b1a8

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1813af28a4e3ceb7456c345f4df001c38434b1a8
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180518/51945fda/attachment.html>