[Git][security-tracker-team/security-tracker][master] CVE-2018-1966{1,2}: update notes

[Hugo Lefeuvre]

Hugo Lefeuvre pushed to branch master at Debian Security Tracker / security-tracker


Commits:
50e610ea by Hugo Lefeuvre at 2018-12-09T14:46:57Z
CVE-2018-1966{1,2}: update notes

These cves are very similar to CVE-2017-17456/CVE-2017-17457 but not
duplicates properly speaking (will require separate patches).

See upstream bug report for more info.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1609,12 +1609,12 @@ CVE-2018-19662 (An issue was discovered in libsndfile 1.0.28. There is a buffer
 	- libsndfile <unfixed> (low)
 	[stretch] - libsndfile <no-dsa> (Minor issue)
 	NOTE: https://github.com/erikd/libsndfile/issues/429
-	NOTE: Probably a dupe of CVE-2017-17456/CVE-2017-17457
+	NOTE: similar to CVE-2017-17456/CVE-2017-17457 (but not duplicate)
 CVE-2018-19661 (An issue was discovered in libsndfile 1.0.28. There is a buffer ...)
 	- libsndfile <unfixed> (low)
 	[stretch] - libsndfile <no-dsa> (Minor issue)
 	NOTE: https://github.com/erikd/libsndfile/issues/429
-	NOTE: Probably a dupe of CVE-2017-17456/CVE-2017-17457
+	NOTE: similar to CVE-2017-17456/CVE-2017-17457 (but not duplicate)
 CVE-2018-19660 (An exploitable authenticated command-injection vulnerability exists in ...)
 	NOT-FOR-US: Moxa
 CVE-2018-19659 (An exploitable authenticated command-injection vulnerability exists in ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/50e610ea0e2e13bb7be6c2281edd54e07cb8851e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/50e610ea0e2e13bb7be6c2281edd54e07cb8851e
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181209/115c38f1/attachment.html>