Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
191c8d93 by Salvatore Bonaccorso at 2020-02-29T21:19:09+01:00
Reference now current commit for CVE-2017-18640
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -15473,7 +15473,7 @@ CVE-2017-18640 (The Alias feature in SnakeYAML 1.18
allows entity expansion duri
NOTE:
https://bitbucket.org/asomov/snakeyaml/issues/377/allow-configuration-for-preventing-billion
NOTE: Patch to introduce a configuration option to restrict aliases for
NOTE: collections:
- NOTE:
https://bitbucket.org/asomov/snakeyaml/commits/b680ce64971d943083012c04690c0ffa9fea6da4
+ NOTE:
https://bitbucket.org/asomov/snakeyaml/commits/da11ddbd91c1f8392ea932b37fa48110fa54ed8c
CVE-2019-19726 (OpenBSD through 6.6 allows local users to escalate to root
because a c ...)
NOT-FOR-US: OpenBSD
CVE-2019-19725 (sysstat through 12.2.0 has a double free in check_file_actlst
in sa_co ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/191c8d93ce922f2e62b9577436620486cba4303f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/191c8d93ce922f2e62b9577436620486cba4303f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
