[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso carnil at debian.org
Sun May 27 09:10:35 BST 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ecb3eada by security tracker role at 2018-05-27T08:10:29+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,9 +1,27 @@
-CVE-2018-11496
-	RESERVED
-CVE-2018-11495
+CVE-2018-11505 (The Werewolf Online application 0.8.8 for Android allows attackers to ...)
+	TODO: check
+CVE-2018-11504 (The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a ...)
+	TODO: check
+CVE-2018-11503 (The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT ...)
+	TODO: check
+CVE-2018-11502
 	RESERVED
-CVE-2018-11494
+CVE-2018-11501 (PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via ...)
+	TODO: check
+CVE-2018-11500 (An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF ...)
+	TODO: check
+CVE-2018-11499 (A use-after-free vulnerability exists in handle_error() in ...)
+	TODO: check
+CVE-2018-11498 (In Lizard v1.0 and LZ5 v2.0 (the prior release, before the product was ...)
+	TODO: check
+CVE-2018-11497
 	RESERVED
+CVE-2018-11496 (In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in ...)
+	TODO: check
+CVE-2018-11495 (OpenCart through 3.0.2.0 allows directory traversal in the editDownload ...)
+	TODO: check
+CVE-2018-11494 (The "program extension upload" feature in OpenCart through 3.0.2.0 has ...)
+	TODO: check
 CVE-2018-11493 (An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF ...)
 	NOT-FOR-US: WUZHI CMS
 CVE-2018-11492
@@ -6027,6 +6045,7 @@ CVE-2017-18249 (The add_free_nid function in fs/f2fs/node.c in the Linux kernel 
 	[wheezy] - linux <not-affected> (Vulnerable code not present)
 	NOTE: Fixed by: https://git.kernel.org/linus/30a61ddf8117c26ac5b295e1233eaa9629a94ca3
 CVE-2017-18248 (The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when ...)
+	{DLA-1387-1}
 	- cups 2.2.6-1
 	NOTE: https://github.com/apple/cups/commit/49fa4983f25b64ec29d548ffa3b9782426007df3
 	NOTE: https://github.com/apple/cups/issues/5143
@@ -13468,12 +13487,12 @@ CVE-2018-6412 (In the function sbusfb_ioctl_helper() in drivers/video/fbdev/sbus
 	- linux <unfixed> (unimportant)
 	NOTE: https://marc.info/?l=linux-fbdev&m=151734425901499&w=2
 	NOTE: The issue only affects SPARC systems.
-CVE-2018-6411
-	RESERVED
-CVE-2018-6410
-	RESERVED
-CVE-2018-6409
-	RESERVED
+CVE-2018-6411 (An issue was discovered in Appnitro MachForm before 4.2.3. When the ...)
+	TODO: check
+CVE-2018-6410 (An issue was discovered in Appnitro MachForm before 4.2.3. There is a ...)
+	TODO: check
+CVE-2018-6409 (An issue was discovered in Appnitro MachForm before 4.2.3. The module ...)
+	TODO: check
 CVE-2018-6408 (An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 ...)
 	NOT-FOR-US: CIPCAMPTIWL devices
 CVE-2018-6407 (An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ecb3eada3209efdaff1f5a9af4b17313b9a042ea

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ecb3eada3209efdaff1f5a9af4b17313b9a042ea
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180527/0d6613f5/attachment.html>


More information about the debian-security-tracker-commits mailing list