Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d52f4762 by Salvatore Bonaccorso at 2018-11-05T06:15:36Z
Add CVE-2018-18928/icu
- - - - -
1218cf2b by Salvatore Bonaccorso at 2018-11-05T06:18:46Z
Merge remote-tracking branch 'origin/master'
- - - - -
e8f0a2bc by Salvatore Bonaccorso at 2018-11-05T06:22:06Z
Update status for unstable for icu
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,6 +1,9 @@
CVE-2018-18928 [integer-overflow in
icu_63::number::impl::DecimalQuantity::toScientificString()]
[experimental] - icu <unfixed>
+ - icu <not-affected> (Vulnerable code introduced later)
+ NOTE: https://bugs.chromium.org/p/chromium/issues/detail?id=900059
NOTE: Fixed by:
https://github.com/unicode-org/icu/commit/53d8c8f3d181d87a6aa925b449b51c4a2c922a51
+ NOTE: https://unicode-org.atlassian.net/browse/ICU-20246
CVE-2018-18927 (An issue was discovered in PublicCMS V4.0. It allows XSS by
modifying ...)
NOT-FOR-US: PublicCMS
CVE-2018-18926 (Gitea before 1.5.4 allows remote code execution because it
does not ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/0d5587603b0620b014e07499171bb10e9f45f7c2...e8f0a2bc8e8622396ac40d108a540b85e178e616
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/0d5587603b0620b014e07499171bb10e9f45f7c2...e8f0a2bc8e8622396ac40d108a540b85e178e616
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
