[Git][security-tracker-team/security-tracker][master] Add CVE-2019-18885/linux
Salvatore Bonaccorso
carnil at debian.org
Thu Nov 14 20:30:14 GMT 2019
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
b93aaf5d by Salvatore Bonaccorso at 2019-11-14T20:29:43Z
Add CVE-2019-18885/linux
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -192,7 +192,8 @@ CVE-2019-18886 [Prevent user enumeration using switch user functionality]
NOTE: https://symfony.com/blog/cve-2019-18886-prevent-user-enumeration-using-switch-user-functionality
NOTE: https://github.com/symfony/symfony/commit/7bd4a92fc9cc15d9a9fbb9eb1041e01b977f8332
CVE-2019-18885 (fs/btrfs/volumes.c in the Linux kernel before 5.1 allows a btrfs_verif ...)
- TODO: check
+ - linux 5.2.6-1
+ NOTE: https://git.kernel.org/linus/09ba3bc9dd150457c506e4661380a6183af651c1 (5.1-rc1)
CVE-2019-18884 (index.php/team_members/add_team_member in RISE Ultimate Project Manage ...)
NOT-FOR-US: RISE
CVE-2019-18883 (XSS exists in Lavalite CMS 5.7 via the admin/profile name or designati ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b93aaf5d435a3ee1f5a2f26c6aa632667ddbb209
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/b93aaf5d435a3ee1f5a2f26c6aa632667ddbb209
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191114/f33da0a7/attachment.html>
More information about the debian-security-tracker-commits
mailing list