[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
carnil at debian.org
Sun May 27 09:10:35 BST 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
ecb3eada by security tracker role at 2018-05-27T08:10:29+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,9 +1,27 @@
-CVE-2018-11496
- RESERVED
-CVE-2018-11495
+CVE-2018-11505 (The Werewolf Online application 0.8.8 for Android allows attackers to ...)
+ TODO: check
+CVE-2018-11504 (The islist function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a ...)
+ TODO: check
+CVE-2018-11503 (The isfootnote function in markdown.c in libmarkdown.a in DISCOUNT ...)
+ TODO: check
+CVE-2018-11502
RESERVED
-CVE-2018-11494
+CVE-2018-11501 (PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via ...)
+ TODO: check
+CVE-2018-11500 (An issue was discovered in PublicCMS V4.0.20180210. There is a CSRF ...)
+ TODO: check
+CVE-2018-11499 (A use-after-free vulnerability exists in handle_error() in ...)
+ TODO: check
+CVE-2018-11498 (In Lizard v1.0 and LZ5 v2.0 (the prior release, before the product was ...)
+ TODO: check
+CVE-2018-11497
RESERVED
+CVE-2018-11496 (In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in ...)
+ TODO: check
+CVE-2018-11495 (OpenCart through 3.0.2.0 allows directory traversal in the editDownload ...)
+ TODO: check
+CVE-2018-11494 (The "program extension upload" feature in OpenCart through 3.0.2.0 has ...)
+ TODO: check
CVE-2018-11493 (An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF ...)
NOT-FOR-US: WUZHI CMS
CVE-2018-11492
@@ -6027,6 +6045,7 @@ CVE-2017-18249 (The add_free_nid function in fs/f2fs/node.c in the Linux kernel
[wheezy] - linux <not-affected> (Vulnerable code not present)
NOTE: Fixed by: https://git.kernel.org/linus/30a61ddf8117c26ac5b295e1233eaa9629a94ca3
CVE-2017-18248 (The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when ...)
+ {DLA-1387-1}
- cups 2.2.6-1
NOTE: https://github.com/apple/cups/commit/49fa4983f25b64ec29d548ffa3b9782426007df3
NOTE: https://github.com/apple/cups/issues/5143
@@ -13468,12 +13487,12 @@ CVE-2018-6412 (In the function sbusfb_ioctl_helper() in drivers/video/fbdev/sbus
- linux <unfixed> (unimportant)
NOTE: https://marc.info/?l=linux-fbdev&m=151734425901499&w=2
NOTE: The issue only affects SPARC systems.
-CVE-2018-6411
- RESERVED
-CVE-2018-6410
- RESERVED
-CVE-2018-6409
- RESERVED
+CVE-2018-6411 (An issue was discovered in Appnitro MachForm before 4.2.3. When the ...)
+ TODO: check
+CVE-2018-6410 (An issue was discovered in Appnitro MachForm before 4.2.3. There is a ...)
+ TODO: check
+CVE-2018-6409 (An issue was discovered in Appnitro MachForm before 4.2.3. The module ...)
+ TODO: check
CVE-2018-6408 (An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 ...)
NOT-FOR-US: CIPCAMPTIWL devices
CVE-2018-6407 (An issue was discovered on Conceptronic CIPCAMPTIWL V3 0.61.30.21 ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ecb3eada3209efdaff1f5a9af4b17313b9a042ea
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ecb3eada3209efdaff1f5a9af4b17313b9a042ea
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180527/0d6613f5/attachment.html>
More information about the debian-security-tracker-commits
mailing list