[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso carnil at debian.org
Sun Nov 18 20:10:38 GMT 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
959635fe by security tracker role at 2018-11-18T20:10:29Z
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,21 @@
+CVE-2018-19358 (GNOME Keyring through 3.28.2 allows local users to retrieve login ...)
+	TODO: check
+CVE-2018-19357
+	RESERVED
+CVE-2018-19356
+	RESERVED
+CVE-2018-19355
+	RESERVED
+CVE-2018-19354
+	RESERVED
+CVE-2018-19353 (The ansilove_ansi function in loaders/ansi.c in libansilove 1.0.0 ...)
+	TODO: check
+CVE-2018-19352 (Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name ...)
+	TODO: check
+CVE-2018-19351 (Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook ...)
+	TODO: check
+CVE-2008-7320 (** DISPUTED ** GNOME Seahorse through 3.30 allows physically proximate ...)
+	TODO: check
 CVE-2018-19350 (In SeaCMS v6.6.4, there is stored XSS via the ...)
 	NOT-FOR-US: SeaCMS
 CVE-2018-19349 (In SeaCMS v6.64, there is SQL injection via the admin_makehtml.php ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/959635fe6d3e14e5b664a4d6e29f13be880ac4ad

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/959635fe6d3e14e5b664a4d6e29f13be880ac4ad
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181118/6bbc42f7/attachment.html>


More information about the debian-security-tracker-commits mailing list