Ola Lundqvist pushed to branch master at Debian Security Tracker / security-tracker
Commits: 2b096652 by Ola Lundqvist at 2018-03-28T19:18:11+02:00 Triage result. - - - - - 2 changed files: - data/CVE/list - data/dla-needed.txt Changes: ===================================== data/CVE/list ===================================== --- a/data/CVE/list +++ b/data/CVE/list @@ -104,6 +104,7 @@ CVE-2018-9058 (In Long Range Zip (aka lrzip) 0.631, there is an infinite loop in - lrzip <unfixed> [stretch] - lrzip <no-dsa> (Minor issue) [jessie] - lrzip <no-dsa> (Minor issue) + [wheezy] - lrzip <ignored> (Minor issue) NOTE: https://github.com/ckolivas/lrzip/issues/93 CVE-2018-XXXX [DRUPAL-PSA-2018-001] - drupal7 <unfixed> (bug #894259) @@ -709,6 +710,7 @@ CVE-2018-1000135 (GNOME NetworkManager version 1.10.2 and earlier contains a Inf - network-manager <unfixed> [stretch] - network-manager <no-dsa> (Minor issue) [jessie] - network-manager <no-dsa> (Minor issue) + [wheezy] - network-manager <no-dsa> (Minor issue) NOTE: https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1754671 NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=746422 NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1553634 @@ -5082,6 +5084,7 @@ CVE-2018-7185 (The protocol engine in ntp 4.2.6 before 4.2.8p11 allows a remote - ntp 1:4.2.8p11+dfsg-1 (low) [stretch] - ntp <no-dsa> (Minor issue) [jessie] - ntp <no-dsa> (Minor issue) + [wheezy] - ntp <ignored> (Minor issue) - ntpsec <not-affected> (Issue not present) NOTE: http://www.kb.cert.org/vuls/id/961909 NOTE: http://support.ntp.org/bin/view/Main/NtpBug3454 @@ -5090,6 +5093,7 @@ CVE-2018-7184 (ntpd in ntp 4.2.8p4 before 4.2.8p11 drops bad packets before upda - ntp 1:4.2.8p11+dfsg-1 (low) [stretch] - ntp <no-dsa> (Minor issue) [jessie] - ntp <no-dsa> (Minor issue) + [wheezy] - ntp <ignored> (Minor issue) - ntpsec <not-affected> (Issue not present) NOTE: http://www.kb.cert.org/vuls/id/961909 NOTE: http://support.ntp.org/bin/view/Main/NtpBug3453 ===================================== data/dla-needed.txt ===================================== --- a/data/dla-needed.txt +++ b/data/dla-needed.txt @@ -123,6 +123,8 @@ opencv -- openjdk-7 (Emilio Pozuelo) -- +openssl +-- php5 NOTE: 20180226: consider reviewing the backlog of issues fixed in jessie to see if it is worth fixing a few DOS in the backlog (anarcat) -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2b0966525de1a2641b2c65ad3df6abbde424930c --- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2b0966525de1a2641b2c65ad3df6abbde424930c You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits