Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 71dac9ac by Salvatore Bonaccorso at 2018-06-08T14:26:57+02:00 Add mercurial entries for at least three of the commits, 7 in total have (SEC) markings For three at least there seem to be need of a CVE, in total there 7 changesets marked with (SEC) wich might be potentially needing a identifier. https://www.mercurial-scm.org/repo/hg/rev/9c5ced5276d6 https://www.mercurial-scm.org/repo/hg/rev/59837a16896d https://www.mercurial-scm.org/repo/hg/rev/7f22ef3c0ee7 https://www.mercurial-scm.org/repo/hg/rev/0b208c13781c https://www.mercurial-scm.org/repo/hg/rev/faa924469635 https://www.mercurial-scm.org/repo/hg/rev/1acfc35d478c https://www.mercurial-scm.org/repo/hg/rev/90a274965de7 - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== --- a/data/CVE/list +++ b/data/CVE/list @@ -1,5 +1,14 @@ -CVE-2018-XXXX [mpatch: be more careful about parsing binary patch data] +CVE-2018-XXXX [OVE-20180430-0004: mpatch: ensure fragment start isn't past the end of orig] - mercurial <unfixed> + NOTE: https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.6.1_.282018-06-06.29 + NOTE: https://www.mercurial-scm.org/repo/hg/rev/faa924469635 +CVE-2018-XXXX [OVE-20180430-0002: mpatch: protect against underflow in mpatch_apply] + - mercurial <unfixed> + NOTE: https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.6.1_.282018-06-06.29 + NOTE: https://www.mercurial-scm.org/repo/hg/rev/1acfc35d478c +CVE-2018-XXXX [OVE-20180430-0001: mpatch: be more careful about parsing binary patch data] + - mercurial <unfixed> + NOTE: https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.6.1_.282018-06-06.29 NOTE: https://www.mercurial-scm.org/repo/hg/rev/90a274965de7 CVE-2018-12049 (A remote attacker can bypass the System Manager Mode on the Canon ...) TODO: check View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/71dac9ac73e4d0244a56e892df15755da4a125f5 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/71dac9ac73e4d0244a56e892df15755da4a125f5 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
