[Git][security-tracker-team/security-tracker][master] Three CVEs for axtls fixed before initial upload to archive

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bf9297be by Salvatore Bonaccorso at 2020-01-13T22:27:17+01:00
Three CVEs for axtls fixed before initial upload to archive

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -81002,7 +81002,7 @@ CVE-2018-16255 (** DISPUTED ** There is an XSS vulnerability in WP All Import pl
 CVE-2018-16254 (** DISPUTED ** There is an XSS vulnerability in WP All Import plugin 3 ...)
 	NOT-FOR-US: WP All Import plugin for WordPress
 CVE-2018-16253 (In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS# ...)
-	- axtls <unfixed>
+	- axtls <not-affected> (Fixed before initial upload to Debian)
 CVE-2018-16252 (FsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType XML Exter ...)
 	NOT-FOR-US: FsPro Labs Event Log Explorer
 CVE-2018-16251 (A "search for user discovery" injection issue exists in Creatiwity wit ...)
@@ -81245,9 +81245,9 @@ CVE-2018-16151 (In verify_emsa_pkcs1_signature() in gmp_rsa_public_key.c in the
 	- strongswan 5.7.0-1
 	NOTE: https://strongswan.org/blog/2018/09/24/strongswan-vulnerability-(cve-2018-16151,-cve-2018-16152).html
 CVE-2018-16150 (In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS# ...)
-	- axtls <unfixed>
+	- axtls <not-affected> (Fixed before initial upload to Debian)
 CVE-2018-16149 (In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS# ...)
-	- axtls <unfixed>
+	- axtls <not-affected> (Fixed before initial upload to Debian)
 CVE-2018-16148 (The diagnosticsb2ksy parameter of the /rest endpoint in Opsview Monito ...)
 	NOT-FOR-US: Opsview Monitor
 CVE-2018-16147 (The data parameter of the /settings/api/router endpoint in Opsview Mon ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/bf9297becc5f1fcf3db8ce1e9b3b161d07e47aff

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/bf9297becc5f1fcf3db8ce1e9b3b161d07e47aff
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200113/c558d403/attachment-0001.html>