Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
406a7119 by Salvatore Bonaccorso at 2018-04-10T22:53:16+02:00
Reference fix for CVE-2018-9860

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -256,9 +256,12 @@ CVE-2018-9862 (util.c in runV 1.0.0 for Docker mishandles 
a numeric username, wh
        TODO: check
 CVE-2018-9861
        RESERVED
-CVE-2018-9860 [An off by one error in TLS CBC decryption ...]
+CVE-2018-9860 [An off by one error in TLS CBC decryption]
        RESERVED
        - botan 2.4.0-6
+       - botan1.10 <not-affected> (Issue introduced in 1.11.32)
+       NOTE: 
https://github.com/randombit/botan/commit/ec222c99719c396a1f4756b2ca345dbbfbeb5ed5
+       NOTE: Bug introduced in 1.11.32, fixed in 2.6.0
 CVE-2018-9859
        RESERVED
 CVE-2018-1000168



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/406a7119f0e6cfb16e59f66d8d5cf6f49e1a8948

---
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/406a7119f0e6cfb16e59f66d8d5cf6f49e1a8948
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits

Reply via email to