[Git][security-tracker-team/security-tracker][master] hadoop ITP issue

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4e7beedb by Moritz Muehlenhoff at 2019-03-11T19:29:19Z
hadoop ITP issue
mark two remaining systemd issues for stretch as ignored

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -31268,8 +31268,8 @@ CVE-2018-16889 (Ceph does not properly sanitize encryption keys in debug logging
 	NOTE: http://tracker.ceph.com/issues/37847
 	NOTE: https://github.com/ceph/ceph/commit/ba55e2a96c9dfcc7aa2311431beaaa23cb05c30d
 CVE-2018-16888 (It was discovered systemd does not correctly check the content of ...)
-	- systemd 237-1
-	[stretch] - systemd <no-dsa> (Minor issue)
+	- systemd 237-1 (low)
+	[stretch] - systemd <ignored> (Minor issue, too intrusive to backport)
 	[jessie] - systemd <no-dsa> (low priority because this is inherently a bug in the PID file logic)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1662867
 	NOTE: Upstream issue: https://github.com/systemd/systemd/issues/6632
@@ -44761,6 +44761,7 @@ CVE-2018-11768
 	RESERVED
 CVE-2018-11767
 	RESERVED
+	- hadoop <itp> (bug #793644)
 CVE-2018-11766 (In Apache Hadoop 2.7.4 to 2.7.6, the security fix for CVE-2016-6811 is ...)
 	- hadoop <itp> (bug #793644)
 CVE-2018-11765
@@ -58006,8 +58007,8 @@ CVE-2018-6956
 CVE-2018-6955
 	RESERVED
 CVE-2018-6954 (systemd-tmpfiles in systemd through 237 mishandles symlinks present in ...)
-	- systemd 238-1 (bug #890779)
-	[stretch] - systemd <postponed> (Minor issue, revisit if/when fixed upstream)
+	- systemd 238-1 (low; bug #890779)
+	[stretch] - systemd <ignored> (Minor issue, too intrusive to backport)
 	[jessie] - systemd <postponed> (Minor issue, revisit if/when fixed upstream)
 	[wheezy] - systemd <not-affected> (/etc/tmpfiles.d not supported in Wheezy)
 	NOTE: https://github.com/systemd/systemd/issues/7986



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4e7beedb71cc50cb8453d26e9d5d9be665c1d750

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/4e7beedb71cc50cb8453d26e9d5d9be665c1d750
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190311/17f9f674/attachment.html>