Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
bd37ca79 by Salvatore Bonaccorso at 2018-07-11T16:42:48+02:00
Add new cups CVEs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -19150,8 +19150,9 @@ CVE-2018-6555
RESERVED
CVE-2018-6554
RESERVED
-CVE-2018-6553
+CVE-2018-6553 [AppArmor profile issue in cups]
RESERVED
+ - cups <unfixed>
CVE-2018-6552 (Apport does not properly handle crashes originating from a PID
...)
[experimental] - apport <unfixed>
NOTE: apport only in experimental, so we cannot track this in
security-tracker
@@ -25799,14 +25800,22 @@ CVE-2018-4185
RESERVED
CVE-2018-4184 (An issue was discovered in certain Apple products. macOS before
...)
NOT-FOR-US: Apple (Speech component)
-CVE-2018-4183
+CVE-2018-4183 [cups-exec Sandbox Bypass Due to Profile Misconfiguration]
RESERVED
-CVE-2018-4182
+ - cups <unfixed>
+ NOTE: Fixed by:
https://github.com/apple/cups/commit/d47f6aec436e0e9df6554436e391471097686ecc
+CVE-2018-4182 [cups-exec Sandbox Bypass Due to Insecure Error Handling]
RESERVED
-CVE-2018-4181
+ - cups <unfixed>
+ NOTE: Fixed by:
https://github.com/apple/cups/commit/d47f6aec436e0e9df6554436e391471097686ecc
+CVE-2018-4181 [Limited Local File Reads as Root via cupsd.conf Include
Directive]
RESERVED
-CVE-2018-4180
+ - cups <unfixed>
+ NOTE: Fixed by:
https://github.com/apple/cups/commit/d47f6aec436e0e9df6554436e391471097686ecc
+CVE-2018-4180 [Local Privilege Escalation to Root in dnssd Backend
(CUPS_SERVERBIN)]
RESERVED
+ - cups <unfixed>
+ NOTE: Fixed by:
https://github.com/apple/cups/commit/d47f6aec436e0e9df6554436e391471097686ecc
CVE-2018-4179
RESERVED
CVE-2018-4178
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/bd37ca799f2a1db84074a6858f9d4af807c58784
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/bd37ca799f2a1db84074a6858f9d4af807c58784
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
