[Git][security-tracker-team/security-tracker][master] Track some nextcloud issues

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0c0b7c6a by Salvatore Bonaccorso at 2018-10-31T09:39:08Z
Track some nextcloud issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5827,15 +5827,15 @@ CVE-2018-16468 (In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScri
 	- ruby-loofah <unfixed> (bug #912398)
 	NOTE: https://github.com/flavorjones/loofah/issues/154
 CVE-2018-16467 (A missing check in Nextcloud Server prior to 14.0.0 could give ...)
-	TODO: check
+	- nextcloud <itp> (bug #835086)
 CVE-2018-16466 (Improper revalidation of permissions in Nextcloud Server prior to ...)
-	TODO: check
+	- nextcloud <itp> (bug #835086)
 CVE-2018-16465 (Missing state in Nextcloud Server prior to 14.0.0 would not enforce ...)
-	TODO: check
+	- nextcloud <itp> (bug #835086)
 CVE-2018-16464 (A missing access check in Nextcloud Server prior to 14.0.0 could lead ...)
-	TODO: check
+	- nextcloud <itp> (bug #835086)
 CVE-2018-16463 (A bug causing session fixation in Nextcloud Server prior to 14.0.0, ...)
-	TODO: check
+	- nextcloud <itp> (bug #835086)
 CVE-2018-16462 (A command injection vulnerability in the apex-publish-static-files npm ...)
 	TODO: check
 CVE-2018-16461 (A command injection vulnerability in libnmapp package for versions ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c0b7c6a7b55be1da56bcd0bc990b79f0a2d0f44

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c0b7c6a7b55be1da56bcd0bc990b79f0a2d0f44
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181031/2da8bea8/attachment.html>