summaryrefslogtreecommitdiffstats
path: root/data/CVE/2018.list
diff options
context:
space:
mode:
authorMoritz Mühlenhoff <jmm@debian.org>2021-01-10 00:07:00 +0100
committerMoritz Mühlenhoff <jmm@debian.org>2021-01-10 00:07:00 +0100
commit92a8339ee6e9b4858c053d83885536c8b079365c (patch)
treefe36eba2726f3b29cdeb851cea660815c310b69a /data/CVE/2018.list
parentf63d9fb4c4703ebe7439fd8b04a75f6657902baa (diff)
bullseye triage
Diffstat (limited to 'data/CVE/2018.list')
-rw-r--r--data/CVE/2018.list5
1 files changed, 3 insertions, 2 deletions
diff --git a/data/CVE/2018.list b/data/CVE/2018.list
index 3a8be60142..071f1be863 100644
--- a/data/CVE/2018.list
+++ b/data/CVE/2018.list
@@ -497,12 +497,13 @@ CVE-2018-21037 (Subrion CMS 4.1.5 (and possibly earlier versions) allow CSRF to
CVE-2018-21036 (Sails.js before v1.0.0-46 allows attackers to cause a denial of servic ...)
NOT-FOR-US: Sails.js
CVE-2018-21035 (In Qt through 5.14.1, the WebSocket implementation accepts up to 2GB f ...)
- - qtwebsockets-opensource-src <unfixed> (low; bug #953049)
- [buster] - qtwebsockets-opensource-src <ignored> (Minor issue)
+ - qtwebsockets-opensource-src 5.15.1-2 (low; bug #953049)
+ [buster] - qtwebsockets-opensource-src <ignored> (Minor issue, fix adds new API only)
[stretch] - qtwebsockets-opensource-src <ignored> (Minor issue)
[jessie] - qtwebsockets-opensource-src <no-dsa> (Minor issue)
NOTE: https://bugreports.qt.io/browse/QTBUG-70693
NOTE: https://codereview.qt-project.org/c/qt/qtwebsockets/+/284735
+ NOTE: https://github.com/qt/qtwebsockets/commit/ed93680f34e92ad0383aa4e610bb65689118ca93
CVE-2018-21034 (In Argo versions prior to v1.5.0-rc1, it was possible for authenticate ...)
NOT-FOR-US: Argo
CVE-2018-21033 (A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Au ...)

© 2014-2024 Faster IT GmbH | imprint | privacy policy