[Git][security-tracker-team/security-tracker][master] 2 commits: mark CVE-2018-18443 as no-dsa for jessie
Thorsten Alteholz
alteholz at debian.org
Thu Oct 25 19:09:13 BST 2018
Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker
Commits:
b74e878f by Thorsten Alteholz at 2018-10-25T18:02:45Z
mark CVE-2018-18443 as no-dsa for jessie
- - - - -
1ae3f638 by Thorsten Alteholz at 2018-10-25T18:03:22Z
add qemu
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -503,6 +503,7 @@ CVE-2018-18444 (makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of
CVE-2018-18443 (OpenEXR 2.3.0 has a memory leak in ThreadPool in ...)
- openexr <unfixed>
[stretch] - openexr <no-dsa> (Minor issue)
+ [jessie] - openexr <no-dsa> (Minor issue)
NOTE: https://github.com/openexr/openexr/issues/350
CVE-2018-18442
RESERVED
=====================================
data/dla-needed.txt
=====================================
@@ -78,6 +78,8 @@ poppler (Mike Gabriel)
NOTE: 20180928: Consider fixing no-dsa/ignored bugs as well since this is
NOTE: 20180928: frequently used package.
--
+qemu
+--
salt (Antoine Beaupre)
NOTE: 20180921: CVE-2017-7893 is not crucial since the managed system must be
NOTE: 20180921: compromised first. But the security escalation effect can cause
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/d1de1f3c9bae8233484a69424628efb88b7ecab9...1ae3f638a5c4b7ee62ad91e629f9b02d1f16d0ab
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/d1de1f3c9bae8233484a69424628efb88b7ecab9...1ae3f638a5c4b7ee62ad91e629f9b02d1f16d0ab
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181025/89672c36/attachment-0001.html>
More information about the debian-security-tracker-commits
mailing list