Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
490f1a07 by Salvatore Bonaccorso at 2019-08-05T06:25:03Z
Add fixed version for CVE-2017-18342/pyyaml
Thanks: Scott Kitterman
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -57798,10 +57798,10 @@ CVE-2018-12906
CVE-2018-12905 (joyplus-cms 1.6.0 has XSS in admin_player.php, related to
manager/inde ...)
NOT-FOR-US: joyplus-cms
CVE-2017-18342 (In PyYAML before 5.1, the yaml.load() API could execute
arbitrary code ...)
- - pyyaml <unfixed> (unimportant; bug #902878)
+ - pyyaml 5.1.2-1 (unimportant; bug #902878)
NOTE: This is a well-known design deficiency in pyyaml, various CVE IDs
have been assigned
NOTE: to applications misusing the API over the years. The CVE ID was
assigned to raise
- NOTE: awareness (and 4.1 now fixes the default behaviour as well)
+ NOTE: awareness (and 5.1 now fixes the default behaviour as well)
NOTE: https://github.com/yaml/pyyaml/pull/74
CVE-2018-12904 (In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when
nested v ...)
- linux 4.16.16-1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/490f1a0742b36ccb174738346de3adc658ff1a86
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/490f1a0742b36ccb174738346de3adc658ff1a86
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
