Control: found -1 0.17-17 Control: retitle -1 netkit-rsh: CVE-2019-7282 CVE-2019-7283
Hi Alberto, On Thu, Jan 31, 2019 at 11:03:36AM +0100, Alberto Gonzalez Iniesta wrote: > On Wed, Jan 30, 2019 at 11:17:51PM +0100, Salvatore Bonaccorso wrote: > > Hi, > > Hi! > > > > netkit-rsh (0.17-20) unstable; urgency=medium > > > . > > > * Fix CVE-2018-20685 and CVE-2019-6111. (Closes: #920486) > > > Thanks Hiroyuki YAMAMORI for the heads up. > > > > FTR, I have asked MITRE if those two CVEs should be used as well for > > netkit-rsh or if it would need two new CVEs. > > Ooops! I should have asked before... Sorry. > Do you (sec team) think we should prepare an upload with this fix for > stable security? So it turns out that two new CVEs were assigned, CVE-2019-7282 (for the one similar to CVE-2018-20685) and CVE-2019-7283 (for the one similar to CVE-2019-6111). Regards, Salvatore