[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Reference fix for CVE-2018-9234

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
115001aa by Salvatore Bonaccorso at 2018-04-05T21:11:24+02:00
Reference fix for CVE-2018-9234

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -277,6 +277,7 @@ CVE-2018-9234 (GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which k
 	[jessie] - gnupg2 <no-dsa> (Minor issue)
 	[wheezy] - gnupg2 <no-dsa> (Minor issue)
 	NOTE: https://dev.gnupg.org/T3844
+	NOTE: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=a17d2d1f690ebe5d005b4589a5fe378b6487c657
 	TODO: doublecheck gpg1 status with Werner/Niibe
 CVE-2018-9240 (ncmpc through 0.29 is prone to a NULL pointer dereference flaw. If a ...)
 	- ncmpc <unfixed> (low; bug #894724)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/115001aa94639df78fbe639fc57f77c78247eba6

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/115001aa94639df78fbe639fc57f77c78247eba6
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180405/233fe0d9/attachment.html>