Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4fcc9b23 by Moritz Muehlenhoff at 2018-06-29T23:18:03+02:00
bugs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1109,23 +1109,23 @@ CVE-2018-1000401
RESERVED
CVE-2018-12607 [gitlab: Persistent XSS in charts]
RESERVED
- - gitlab <unfixed>
+ - gitlab <unfixed> (bug #902726)
[stretch] - gitlab <not-affected> (Only affects >= 10.5)
NOTE:
https://about.gitlab.com/2018/06/25/security-release-gitlab-11-dot-0-dot-1-released/
CVE-2018-XXXX [gitlab: Activity feed publicly displaying internal project
names]
- - gitlab <unfixed>
+ - gitlab <unfixed> (bug #902726)
[stretch] - gitlab <not-affected> (Only affects >= 10.7)
NOTE:
https://about.gitlab.com/2018/06/25/security-release-gitlab-11-dot-0-dot-1-released/
CVE-2018-XXXX [gitlab: Content injection via username]
- - gitlab <unfixed>
+ - gitlab <unfixed> (bug #902726)
NOTE:
https://about.gitlab.com/2018/06/25/security-release-gitlab-11-dot-0-dot-1-released/
CVE-2018-12606 [gitlab: wiki XSS]
RESERVED
- - gitlab <unfixed>
+ - gitlab <unfixed> (bug #902726)
NOTE:
https://about.gitlab.com/2018/06/25/security-release-gitlab-11-dot-0-dot-1-released/
CVE-2018-12605 [gitlab: XSS in url_for(params)]
RESERVED
- - gitlab <unfixed>
+ - gitlab <unfixed> (bug #902726)
[stretch] - gitlab <not-affected> (Only affects 10.7)
NOTE:
https://about.gitlab.com/2018/06/25/security-release-gitlab-11-dot-0-dot-1-released/
CVE-2018-12604 (GreenCMS 2.3.0603 allows remote attackers to obtain sensitive
...)
@@ -1139,13 +1139,13 @@ CVE-2018-12601 (There is a heap-based buffer overflow
in ReadImage in input-tga.
NOTE: https://github.com/pts/sam2p/issues/41
CVE-2018-12600 (In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in
...)
{DLA-1394-1}
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #902728)
NOTE: https://github.com/ImageMagick/ImageMagick/issues/1178
NOTE:
https://github.com/ImageMagick/ImageMagick/commit/921f208c2ea3cc45847f380257f270ff424adfff
NOTE: ImageMagick6:
https://github.com/ImageMagick/ImageMagick6/commit/ae71c12bbaa34d942e036824ff389c22b7dacade
CVE-2018-12599 (In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in
...)
{DLA-1394-1}
- - imagemagick <unfixed>
+ - imagemagick <unfixed> (bug #902727)
NOTE: https://github.com/ImageMagick/ImageMagick/issues/1177
NOTE:
https://github.com/ImageMagick/ImageMagick/commit/ae04fa4be910255e5d363edebd77adeee99a525d
NOTE: ImageMagick6:
https://github.com/ImageMagick/ImageMagick6/commit/081f518eb9cb38e683b8b9ccb9e4ab5c52f82c2f
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/4fcc9b235414021b4983135b13aa40c3e9f446cc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/4fcc9b235414021b4983135b13aa40c3e9f446cc
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
