[Git][security-tracker-team/security-tracker][master] accountsservice fixed

Moritz Muehlenhoff jmm at debian.org
Tue Mar 5 10:37:39 GMT 2019


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2c6142d5 by Moritz Muehlenhoff at 2019-03-05T10:37:11Z
accountsservice fixed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -38491,7 +38491,7 @@ CVE-2018-14054 (A double free exists in the MP4StringProperty class in mp4proper
 	[jessie] - mp4v2 <no-dsa> (Minor issue)
 	NOTE: http://www.openwall.com/lists/oss-security/2018/07/13/1
 CVE-2018-14036 (Directory Traversal with ../ sequences occurs in AccountsService before ...)
-	- accountsservice <unfixed> (low; bug #903828)
+	- accountsservice 0.6.45-2 (low; bug #903828)
 	[stretch] - accountsservice <no-dsa> (Minor issue)
 	[jessie] - accountsservice <ignored> (Minor issue)
 	NOTE: http://www.openwall.com/lists/oss-security/2018/07/02/2
@@ -40801,6 +40801,7 @@ CVE-2018-13005 (An issue was discovered in MP4Box in GPAC 0.7.1. The function ur
 	- gpac <unfixed> (bug #902782)
 	[stretch] - gpac <no-dsa> (Minor issue)
 	NOTE: https://github.com/gpac/gpac/issues/1088
+	NOTE: https://github.com/gpac/gpac/commit/bceb03fd2be95097a7b409ea59914f332fb6bc86
 CVE-2018-13004
 	RESERVED
 CVE-2018-13003 (An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2c6142d594bfa4baaf011a752e28e2e712625ebc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2c6142d594bfa4baaf011a752e28e2e712625ebc
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190305/0443022c/attachment.html>


More information about the debian-security-tracker-commits mailing list