[Git][security-tracker-team/security-tracker][master] CVE-2019-17357/cacti: stretch not-affected

[Hugo Lefeuvre]

Hugo Lefeuvre pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f10ec44b by Hugo Lefeuvre at 2019-12-30T10:09:07Z
CVE-2019-17357/cacti: stretch not-affected

0.8.8h does sanitize template_id, the check was removed later.

see #947374 for more information.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14708,6 +14708,7 @@ CVE-2019-17358 (Cacti through 1.2.7 is affected by multiple instances of lib/fun
 CVE-2019-17357
 	RESERVED
 	- cacti 1.2.8+ds1-1 (bug #947374)
+	[stretch] - cacti <not-affected> (Vulnerable code not present)
 	[jessie] - cacti <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/Cacti/cacti/issues/3025
 	NOTE: https://github.com/Cacti/cacti/commit/d6dc48503bbcde0717e7a93df7638fd4796200f4



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f10ec44bf4986b539888523bbb46dc9169dc3253

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f10ec44bf4986b539888523bbb46dc9169dc3253
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191230/ab9cb163/attachment.html>