[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] new gpg issue

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2538dc0d by Moritz Muehlenhoff at 2018-04-04T21:45:45+02:00
new gpg issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -152,7 +152,11 @@ CVE-2017-18256 (Brave Browser before 0.13.0 allows remote attackers to cause a d
 CVE-2016-10718 (Brave Browser before 0.13.0 allows a tab to close itself even if the ...)
 	NOT-FOR-US: Brave Browser
 CVE-2018-9234 (GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key ...)
-	TODO: check
+	- gnupg2 <unfixed> (low)
+	[stretch] - gnupg2 <no-dsa> (Minor issue)
+	[jessie] - gnupg2 <no-dsa> (Minor issue)
+	NOTE: https://dev.gnupg.org/T3844
+	TODO: doublecheck gpg1 status with Werner/Niibe
 CVE-2018-9240 (ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a ...)
 	- ncmpc <unfixed> (low; bug #894724)
 	[stretch] - ncmpc <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2538dc0d4127b5087fe3d56edcb9a4c97df52585

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2538dc0d4127b5087fe3d56edcb9a4c97df52585
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180404/4cb75d7d/attachment.html>