Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 6a6ae183 by Salvatore Bonaccorso at 2018-01-28T12:52:49+01:00 Add assigned CVE for electrum issue: #886683 The CVE unfortunately did not reach yet the MITRE database. But while checking another electrum CVE, this CVE was mentioned. The CVE was confirmed by MITRE: The DWF project has assigned it, but not yet pubished back. - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== --- a/data/CVE/list +++ b/data/CVE/list @@ -2652,7 +2652,7 @@ CVE-2017-18024 (AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the de NOT-FOR-US: AvantFAX CVE-2017-18023 (Office Tracker 11.2.5 has XSS via the logincount parameter to the ...) NOT-FOR-US: Office Tracker -CVE-2018-XXXX [Password protect the JSONRPC interface] +CVE-2018-1000022 [Password protect the JSONRPC interface] - electrum 3.0.5-1 (bug #886683) [stretch] - electrum <ignored> (Unable to connect to current Etherum servers and thus not exploitable, scheduled for removal at #887412) [jessie] - electrum <not-affected> (Only affects >= 2.6) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6a6ae183ba3df96cd22513be90813b72bbc29666 --- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6a6ae183ba3df96cd22513be90813b72bbc29666 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits