[Git][security-tracker-team/security-tracker][master] Demote severity for open-vm-tools issue to unimportant

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0c6dc65c by Salvatore Bonaccorso at 2019-03-30T07:44:34Z
Demote severity for open-vm-tools issue to unimportant

The symlink race is neutralized by the kernel hardening as discussed
with the maintainer.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -705,8 +705,9 @@ CVE-2019-10278
 CVE-2019-10277
 	RESERVED
 CVE-2019-XXXX [insecure handling of /tmp/VMwareDnD]
-	- open-vm-tools 2:10.3.10-1 (bug #925959)
+	- open-vm-tools 2:10.3.10-1 (bug #925959; unimportant)
 	NOTE: https://github.com/vmware/open-vm-tools/commit/e88f91b00a715b79255de6576506d80ecfdb064c
+	NOTE: Neutralised by kernel hardening
 CVE-2019-10276 (Western Bridge Cobub Razor 0.8.0 has a file upload vulnerability via t ...)
 	NOT-FOR-US: Western Bridge Cobub Razor
 CVE-2019-10275



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c6dc65cf54e340178ec53b0e82cbde12f7abdfb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c6dc65cf54e340178ec53b0e82cbde12f7abdfb
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190330/76f6adf4/attachment.html>