[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2015-6816/ganglia-web

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bed2d8d2 by Salvatore Bonaccorso at 2020-10-04T07:08:19+02:00
Track fixed version for CVE-2015-6816/ganglia-web

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -262744,13 +262744,14 @@ CVE-2015-6815 (The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4
 	NOTE: https://www.openwall.com/lists/oss-security/2015/09/04/4
 	NOTE: Upstream fix: https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg01199.html
 CVE-2015-6816 (ganglia-web before 3.7.1 allows remote attackers to bypass authenticat ...)
-	- ganglia-web <unfixed> (unimportant; bug #798213)
+	- ganglia-web 3.7.5+debian-1 (unimportant; bug #798213)
 	- ganglia 3.6.0-1 (unimportant)
 	[squeeze] - ganglia <not-affected> (affected code not present)
 	NOTE: See README.Debian.security, only supported behind an authenticated HTTP zone, #702776
 	NOTE: starting with 3.6.0-1 the web front is no longer built from src:ganglia so marking this version as fixed
 	NOTE: https://www.openwall.com/lists/oss-security/2015/09/04/2
 	NOTE: https://github.com/ganglia/ganglia-web/issues/267
+	NOTE: https://github.com/ganglia/ganglia-web/commit/f8cc17054270d54f53d92bbe3f7764dc3d9efcc7
 CVE-2015-6817 (PgBouncer 1.6.x before 1.6.1, when configured with auth_user, allows r ...)
 	- pgbouncer 1.6.1-1
 	[jessie] - pgbouncer <not-affected> (Introduced in 1.6)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bed2d8d218f25b5aa455aadbaa25a616f840bf38

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bed2d8d218f25b5aa455aadbaa25a616f840bf38
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201004/d51ecaba/attachment.html>