Author: jmm Date: 2017-07-25 10:05:48 +0000 (Tue, 25 Jul 2017) New Revision: 53891
Modified: data/CVE/list Log: nodejs CVEfied phpmyadmin / phpldapadmin no-dsa Modified: data/CVE/list =================================================================== --- data/CVE/list 2017-07-25 09:45:52 UTC (rev 53890) +++ data/CVE/list 2017-07-25 10:05:48 UTC (rev 53891) @@ -283,8 +283,11 @@ NOT-FOR-US: NixOS CVE-2017-11500 (A directory traversal vulnerability exists in MetInfo 5.3.17. A remote ...) NOT-FOR-US: MetInfo -CVE-2017-11499 +CVE-2017-11499 [nodejs hash seed] RESERVED + - nodejs 4.8.4~dfsg-1 (bug #868162; unimportant) + NOTE: https://nodejs.org/en/blog/release/v6.11.1/ + NOTE: https://nodejs.org/en/blog/release/v4.8.4/ CVE-2017-11498 RESERVED CVE-2017-11497 @@ -1055,10 +1058,6 @@ RESERVED CVE-2017-11185 RESERVED -CVE-2017-XXXX [nodejs hash seed] - - nodejs 4.8.4~dfsg-1 (bug #868162; unimportant) - NOTE: https://nodejs.org/en/blog/release/v6.11.1/ - NOTE: https://nodejs.org/en/blog/release/v4.8.4/ CVE-2017-11184 RESERVED CVE-2017-11183 @@ -1491,6 +1490,7 @@ CVE-2017-11107 (phpLDAPadmin through 1.2.3 has XSS in htdocs/entry_chooser.php via the ...) {DLA-1019-1} - phpldapadmin <unfixed> (bug #867719) + [jessie] - phpldapadmin <no-dsa> (Minor issue) NOTE: https://github.com/leenooks/phpLDAPadmin/issues/50 NOTE: https://bugs.launchpad.net/ubuntu/+source/phpldapadmin/+bug/1701731 CVE-2017-11106 @@ -41334,16 +41334,17 @@ NOTE: https://www.phpmyadmin.net/security/PMASA-2016-51/ CVE-2016-6627 (An issue was discovered in phpMyAdmin. An attacker can determine the ...) - phpmyadmin 4:4.6.4+dfsg1-1 + [jessie] - phpmyadmin <no-dsa> (Minor issue) [wheezy] - phpmyadmin <no-dsa> (Not critical enough) NOTE: https://www.phpmyadmin.net/security/PMASA-2016-50/ CVE-2016-6626 (An issue was discovered in phpMyAdmin. An attacker could redirect a ...) {DLA-757-1} - phpmyadmin 4:4.6.4+dfsg1-1 + [jessie] - phpmyadmin <no-dsa> (Minor issue) [wheezy] - phpmyadmin <not-affected> (Vulnerable code not present) NOTE: https://www.phpmyadmin.net/security/PMASA-2016-49/ CVE-2016-6625 (An issue was discovered in phpMyAdmin. An attacker can determine ...) - - phpmyadmin 4:4.6.4+dfsg1-1 - [wheezy] - phpmyadmin <no-dsa> (Not critical enough) + - phpmyadmin 4:4.6.4+dfsg1-1 (unimportant) NOTE: https://www.phpmyadmin.net/security/PMASA-2016-48/ NOTE: The solution is to remove a configuration option. This option NOTE: is by default disabled so a default installation is not @@ -41353,10 +41354,12 @@ NOTE: solved for wheezy. CVE-2016-6624 (An issue was discovered in phpMyAdmin involving improper enforcement ...) {DLA-626-1} + [jessie] - phpmyadmin <no-dsa> (Minor issue) - phpmyadmin 4:4.6.4+dfsg1-1 NOTE: https://www.phpmyadmin.net/security/PMASA-2016-47/ CVE-2016-6623 (An issue was discovered in phpMyAdmin. An authorized user can cause a ...) {DLA-626-1} + [jessie] - phpmyadmin <no-dsa> (Minor issue) - phpmyadmin 4:4.6.4+dfsg1-1 NOTE: https://www.phpmyadmin.net/security/PMASA-2016-46/ CVE-2016-6622 (An issue was discovered in phpMyAdmin. An unauthenticated user is able ...) _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits