[Git][security-tracker-team/security-tracker][master] Add CVE-2018-11798/thrift

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
01cd2f65 by Salvatore Bonaccorso at 2019-01-08T20:28:21Z
Add CVE-2018-11798/thrift

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -34420,7 +34420,9 @@ CVE-2018-11800
 CVE-2018-11799 (Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 ...)
 	NOT-FOR-US: Apache Oozie
 CVE-2018-11798 (The Apache Thrift Node.js static web server in versions 0.9.2 through ...)
-	TODO: check
+	- thrift <unfixed>
+	NOTE: https://issues.apache.org/jira/browse/THRIFT-4647
+	NOTE: https://github.com/apache/thrift/commit/2a2b72f6c8aef200ecee4984f011e06052288ff2
 CVE-2018-11797 (In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully ...)
 	{DLA-1547-1}
 	- libpdfbox-java 1:1.8.16-1 (bug #910390)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/01cd2f656387fedee7e1b6c30c7568778f86aec3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/01cd2f656387fedee7e1b6c30c7568778f86aec3
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190108/da03bc83/attachment.html>