[Git][security-tracker-team/security-tracker][master] Remove wordpress for now: Patching CVE-2019-8942 makes CVE-2019-8943

[Abhijith PA]

Abhijith PA pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8ef170de by Abhijith PA at 2019-05-30T08:46:36Z
    Remove wordpress for now: Patching CVE-2019-8942 makes CVE-2019-8943
    non-exploitable, as the former plays an essential part in successfully
    exploiting the latter. The meta_key in _wp_attached_file first needs to
    be updated or modified to a path traversal file name before it can
    execute an embedded PHP code.

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -120,9 +120,6 @@ sysdig (Hugo Lefeuvre)
 tomcat8 (Abhijith PA)
   NOTE: 20190522: FTBFS
 --
-wordpress
-  NOTE: 20190401: remaining one issue (CVE-2019-8943). Waiting for upstream patch (abhijith)
---
 wpa (Thorsten Alteholz)
   NOTE: 20190512: test package
   NOTE: 20190526: tests failed, comparing with Stretch version



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8ef170dee3441dff7858061528ad4db9e202b425

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8ef170dee3441dff7858061528ad4db9e202b425
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190530/0ccb66d5/attachment.html>