[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Reference fix for CVE-2018-9860

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
406a7119 by Salvatore Bonaccorso at 2018-04-10T22:53:16+02:00
Reference fix for CVE-2018-9860

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -256,9 +256,12 @@ CVE-2018-9862 (util.c in runV 1.0.0 for Docker mishandles a numeric username, wh
 	TODO: check
 CVE-2018-9861
 	RESERVED
-CVE-2018-9860 [An off by one error in TLS CBC decryption ...]
+CVE-2018-9860 [An off by one error in TLS CBC decryption]
 	RESERVED
 	- botan 2.4.0-6
+	- botan1.10 <not-affected> (Issue introduced in 1.11.32)
+	NOTE: https://github.com/randombit/botan/commit/ec222c99719c396a1f4756b2ca345dbbfbeb5ed5
+	NOTE: Bug introduced in 1.11.32, fixed in 2.6.0
 CVE-2018-9859
 	RESERVED
 CVE-2018-1000168



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/406a7119f0e6cfb16e59f66d8d5cf6f49e1a8948

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/406a7119f0e6cfb16e59f66d8d5cf6f49e1a8948
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180410/126ca7c4/attachment.html>