[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-998{8, 9}/mbedtls

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
35798e13 by Salvatore Bonaccorso at 2018-04-10T22:59:10+02:00
Add CVE-2018-998{8,9}/mbedtls

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,7 +1,15 @@
 CVE-2018-9989 (ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer ...)
-	TODO: check
+	- mbedtls 2.8.0-1
+	- polarssl <removed>
+	NOTE: https://github.com/ARMmbed/mbedtls/commit/5224a7544c95552553e2e6be0b4a789956a6464e
+	NOTE: https://github.com/ARMmbed/mbedtls/commit/740b218386083dc708ce98ccc94a63a95cd5629e
+	NOTE: https://tls.mbed.org/tech-updates/releases/mbedtls-2.8.0-2.7.2-and-2.1.11-released
 CVE-2018-9988 (ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer ...)
-	TODO: check
+	- mbedtls 2.8.0-1
+	- polarssl <removed>
+	NOTE: https://github.com/ARMmbed/mbedtls/commit/027f84c69f4ef30c0693832a6c396ef19e563ca1
+	NOTE: https://github.com/ARMmbed/mbedtls/commit/a1098f81c252b317ad34ea978aea2bc47760b215
+	NOTE: https://tls.mbed.org/tech-updates/releases/mbedtls-2.8.0-2.7.2-and-2.1.11-released
 CVE-2018-9987
 	RESERVED
 CVE-2018-9986



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/35798e1355ac8ae8e57c8104b645a6394f7f3a93

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/35798e1355ac8ae8e57c8104b645a6394f7f3a93
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180410/5b12f586/attachment.html>