[Git][security-tracker-team/security-tracker][master] CVE-2017-18359/postgis

[Henri Salo]

Henri Salo pushed to branch master at Debian Security Tracker / security-tracker


Commits:
eb32ce2c by Henri Salo at 2019-01-25T09:36:17Z
CVE-2017-18359/postgis

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -49,7 +49,10 @@ CVE-2019-6781
 CVE-2019-6780 (The Wise Chat plugin before 2.7 for WordPress mishandles external links ...)
 	NOT-FOR-US: WordPress plugin wise-chat
 CVE-2017-18359 (PostGIS 2.x before 2.3.3, as used with PostgreSQL, allows remote ...)
-	TODO: check
+	- postgis <unfixed>
+	NOTE: https://trac.osgeo.org/postgis/ticket/3704
+	NOTE: https://trac.osgeo.org/postgis/changeset/15444
+	NOTE: https://trac.osgeo.org/postgis/changeset/15445
 CVE-2019-6779 (Cscms 4.1.8 allows admin.php/links/save CSRF to add, modify, or delete ...)
 	NOT-FOR-US: Cscms
 CVE-2019-6778 [slirp: heap buffer overflow in tcp_emu()]



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/eb32ce2c06b20c326ad084474700bb0cfb9e4ac2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/eb32ce2c06b20c326ad084474700bb0cfb9e4ac2
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190125/d2b9557e/attachment.html>