[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-1000021/git

Salvatore Bonaccorso carnil at debian.org
Mon Feb 5 06:46:23 UTC 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a26f813f by Salvatore Bonaccorso at 2018-02-05T07:46:05+01:00
Add CVE-2018-1000021/git

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -712,8 +712,10 @@ CVE-2018-1000025
 	RESERVED
 CVE-2018-1000023
 	RESERVED
-CVE-2018-1000021
+CVE-2018-1000021 [client prints server sent ANSI escape codes to the terminal, allowing for unverified messages to potentially execute arbitrary commands]
 	RESERVED
+	- git <unfixed>
+	NOTE: http://www.batterystapl.es/2018/01/security-implications-of-ansi-escape.html
 CVE-2018-1000020
 	RESERVED
 CVE-2018-1000019



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a26f813faad75e5125e9b698b793b797ecbd8070

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/a26f813faad75e5125e9b698b793b797ecbd8070
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180205/5cfb6cb0/attachment.html>


More information about the Secure-testing-commits mailing list