[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso carnil at debian.org
Sun Jan 13 08:10:25 GMT 2019


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
79f0eaf8 by security tracker role at 2019-01-13T08:10:17Z
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,17 @@
+CVE-2019-6248 (PHP Scripts Mall Citysearch / Hotfrog / Gelbeseiten Clone Script 2.0.1 ...)
+	TODO: check
+CVE-2019-6247 (An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in ...)
+	TODO: check
+CVE-2019-6246 (An issue was discovered in SVG++ (aka svgpp) 1.2.3. After calling the ...)
+	TODO: check
+CVE-2019-6245 (An issue was discovered in Anti-Grain Geometry (AGG) 2.4 as used in ...)
+	TODO: check
+CVE-2018-20702
+	RESERVED
+CVE-2018-20701
+	RESERVED
+CVE-2018-20700
+	RESERVED
 CVE-2019-6244 (An issue was discovered in UsualToolCMS 8.0. ...)
 	NOT-FOR-US: UsualToolCMS
 CVE-2019-6243 (Frog CMS 0.9.5 allows XSS via the forgot password page (aka the ...)
@@ -22494,8 +22508,7 @@ CVE-2018-16888 [kills privileged process if unprivileged PIDFile was tampered]
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1662867
 	NOTE: Upstream issue: https://github.com/systemd/systemd/issues/6632
 	NOTE: Upstream patches: https://github.com/systemd/systemd/pull/7816
-CVE-2018-16887
-	RESERVED
+CVE-2018-16887 (A cross-site scripting (XSS) flaw was found in the katello component ...)
 	NOT-FOR-US: Katello
 CVE-2018-16886
 	RESERVED
@@ -24353,8 +24366,8 @@ CVE-2018-16208
 	RESERVED
 CVE-2018-16207
 	RESERVED
-CVE-2018-16206
-	RESERVED
+CVE-2018-16206 (Cross-site scripting vulnerability in WordPress plugin spam-byebye ...)
+	TODO: check
 CVE-2018-16205 (Cross-site scripting vulnerability in GROWI v3.2.3 and earlier allows ...)
 	NOT-FOR-US: GROWI
 CVE-2018-16204 (Cross-site scripting vulnerability in Google XML Sitemaps Version ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/79f0eaf8bc303fca0815355c10fee4b97c16bad2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/79f0eaf8bc303fca0815355c10fee4b97c16bad2
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190113/6b3c8a3a/attachment.html>


More information about the debian-security-tracker-commits mailing list