diff options
| author | Salvatore Bonaccorso <carnil@debian.org> | 2018-06-19 10:15:22 +0200 |
|---|---|---|
| committer | Salvatore Bonaccorso <carnil@debian.org> | 2018-06-19 10:15:22 +0200 |
| commit | 0e7b0d0bf4329cfabc07f013e5048b3be92c520e (patch) | |
| tree | 4d7c068d0afc4eb8b7cb8a426a04c2e7b6566341 /data | |
| parent | 8b9e56db9fa9ac40b3f1796d78c840f7ea8ed55e (diff) | |
CVEs assigned for lava issues
Diffstat (limited to 'data')
| -rw-r--r-- | data/CVE/list | 21 |
1 files changed, 9 insertions, 12 deletions
diff --git a/data/CVE/list b/data/CVE/list index bbe404c820..b68f08d2b6 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -1,9 +1,15 @@ CVE-2018-12565 (An issue was discovered in Linaro LAVA before 2018.5.post1. Because of ...) - TODO: check + - lava 2018.5.post1-1 + - lava-server <removed> + NOTE: https://git.linaro.org/lava/lava.git/commit/?id=583666c84ea2f12797a3eb71392bcb05782f5b14 CVE-2018-12564 (An issue was discovered in Linaro LAVA before 2018.5.post1. Because of ...) - TODO: check + - lava 2018.5.post1-1 + - lava-server <removed> + NOTE: https://git.linaro.org/lava/lava.git/commit/?id=95a9a77b144ced24d7425d6544ab03ca7f6c75d3 CVE-2018-12563 (An issue was discovered in Linaro LAVA before 2018.5.post1. Because of ...) - TODO: check + - lava 2018.5.post1-1 + - lava-server <removed> + NOTE: https://git.linaro.org/lava/lava.git/commit/?id=e24ec39599bc07562ad8bc2a581144b8448cb214 CVE-2018-12562 (An issue was discovered in the cantata-mounter D-Bus service in Cantata ...) TODO: check CVE-2018-12561 (An issue was discovered in the cantata-mounter D-Bus service in Cantata ...) @@ -143,15 +149,6 @@ CVE-2018-12500 RESERVED CVE-2018-12499 RESERVED -CVE-2018-XXXX [Remove the ability to past URLs in the submit page] - - lava 2018.5.post1-1 - - lava-server <removed> -CVE-2018-XXXX [Use yaml.safe_load when parsing user data] - - lava 2018.5.post1-1 - - lava-server <removed> -CVE-2018-XXXX [Use requests instead of urlopen] - - lava 2018.5.post1-1 - - lava-server <removed> CVE-2018-12498 (spider.admincp.php in iCMS v7.0.8 has SQL Injection via the id ...) NOT-FOR-US: iCMS CVE-2018-12497 |