Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
400f0da1 by Salvatore Bonaccorso at 2019-01-23T14:30:02Z
Mark CVE-2018-11803/subversion as not affected for stretch and earlier
Vulnerable code (server-side support for recursive directory listing
operations) was introduced in 1.10.0 only and the respective issue was
only affecting buster and sid.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -36980,6 +36980,8 @@ CVE-2018-11804 (Spark's Apache Maven-based build
includes a convenience script,
CVE-2018-11803
RESERVED
- subversion 1.10.4-1
+ [stretch] - subversion <not-affected> (Vulnerable code introduced in
1.10.0)
+ [jessie] - subversion <not-affected> (Vulnerable code introduced in
1.10.0)
NOTE: https://subversion.apache.org/security/CVE-2018-11803-advisory.txt
NOTE: https://www.openwall.com/lists/oss-security/2019/01/23/1
CVE-2018-11802
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/400f0da1e1c87e5bb83f584ccdf25125f2fdb9c9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/400f0da1e1c87e5bb83f584ccdf25125f2fdb9c9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
