Control: found -1 0.17-17
Control: retitle -1 netkit-rsh: CVE-2019-7282 CVE-2019-7283

Hi Alberto,

On Thu, Jan 31, 2019 at 11:03:36AM +0100, Alberto Gonzalez Iniesta wrote:
> On Wed, Jan 30, 2019 at 11:17:51PM +0100, Salvatore Bonaccorso wrote:
> > Hi,
> 
> Hi!
> 
> > >  netkit-rsh (0.17-20) unstable; urgency=medium
> > >  .
> > >    * Fix CVE-2018-20685 and CVE-2019-6111. (Closes: #920486)
> > >      Thanks Hiroyuki YAMAMORI for the heads up.
> > 
> > FTR, I have asked MITRE if those two CVEs should be used as well for
> > netkit-rsh or if it would need two new CVEs.
> 
> Ooops! I should have asked before... Sorry.
> Do you (sec team) think we should prepare an upload with this fix for
> stable security?

So it turns out that two new CVEs were assigned, CVE-2019-7282 (for
the one similar to  CVE-2018-20685) and CVE-2019-7283 (for the one
similar to CVE-2019-6111).

Regards,
Salvatore

Reply via email to