Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: caff7670 by Salvatore Bonaccorso at 2018-10-24T21:56:23Z Add references for CVE-2018-12479 - - - - - 80db656a by Salvatore Bonaccorso at 2018-10-24T21:56:51Z Add reference for CVE-2018-12478 - - - - - 3243a108 by Salvatore Bonaccorso at 2018-10-24T21:57:14Z Update CVE-2018-12477 information Add references to SUSE references for CVE-2018-12477 via https://bugzilla.suse.com/show_bug.cgi?id=1108189 . The issue is located in the refresh_patches service. - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -15149,10 +15149,15 @@ CVE-2018-12480 RESERVED CVE-2018-12479 (A Improper Input Validation vulnerability in Open Build Service allows ...) - open-build-service <unfixed> (bug #911797) + NOTE: https://bugzilla.suse.com/show_bug.cgi?id=1108435 + NOTE: https://github.com/openSUSE/open-build-service/commit/01b015ca2a320afc4fae823465d1e72da8bd60df CVE-2018-12478 (A Improper Input Validation vulnerability in Open Build Service allows ...) - open-build-service <unfixed> (bug #911797) + NOTE: https://bugzilla.suse.com/show_bug.cgi?id=1108280 CVE-2018-12477 (A Improper Neutralization of CRLF Sequences vulnerability in Open ...) - - open-build-service <unfixed> (bug #911797) + NOT-FOR-US: obs-service refresh_patches + NOTE: https://bugzilla.suse.com/show_bug.cgi?id=1108189 + NOTE: https://github.com/openSUSE/obs-service-refresh_patches/commit/d6244245dda5367767efc989446fe4b5e4609cce CVE-2018-12476 RESERVED CVE-2018-12475 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/950b0d7f4ab1a7033b9d1ca51cececf9ccfc3295...3243a1084fb2ec3c141d071023fb158677c07a02 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/950b0d7f4ab1a7033b9d1ca51cececf9ccfc3295...3243a1084fb2ec3c141d071023fb158677c07a02 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
