Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
df570dc1 by Salvatore Bonaccorso at 2018-11-17T23:01:28Z
Add tracking of mongo-c-driver for CVE-2018-16790
In future src:libbson should/will be disaprear, as upstream has decided
to not maintain the different libraries in different source packages,
libbson will uniquely come from src:mongo-c-driver.
In fact for unstable, src:libbson provides a libbson-1.0-0 binary
package, and as well src:mongo-c-driver, the one from src:mongo-c-driver
actually already superseeding the one from src:libbson due to the higher
version number.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6528,6 +6528,7 @@ CVE-2018-16791
CVE-2018-16790 (_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as
used in ...)
- libbson <unfixed> (bug #913896)
[stretch] - libbson <no-dsa> (Minor issue)
+ - mongo-c-driver <unfixed> (bug #913963)
NOTE: https://jira.mongodb.org/browse/CDRIVER-2819
NOTE:
https://github.com/mongodb/mongo-c-driver/commit/0d9a4d98bfdf4acd2c0138d4aaeb4e2e0934bd84
CVE-2018-16789 [nfinite loop due to malformed request payload]
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/df570dc14deaca4419b0f91dd3561899e6ed9c0a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/df570dc14deaca4419b0f91dd3561899e6ed9c0a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
