[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add polarssl for CVE-2018-048{7, 8}
Salvatore Bonaccorso
carnil at debian.org
Tue Feb 13 05:59:34 UTC 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
37b8bb60 by Salvatore Bonaccorso at 2018-02-13T06:59:12+01:00
Add polarssl for CVE-2018-048{7,8}
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -17423,10 +17423,12 @@ CVE-2018-0489
CVE-2018-0488 [Risk of remote code execution when truncated HMAC is enabled]
RESERVED
- mbedtls <unfixed> (bug #890287)
+ - polarssl <removed>
NOTE: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-01
CVE-2018-0487 [Risk of remote code execution when verifying RSASSA-PSS signatures]
RESERVED
- mbedtls <unfixed> (bug #890288)
+ - polarssl <removed>
NOTE: https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-01
CVE-2018-0486 (Shibboleth XMLTooling-C before 1.6.3, as used in Shibboleth Service ...)
{DSA-4085-1 DLA-1242-1}
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/37b8bb6000993aac61b8469f2243832285cf99da
---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/37b8bb6000993aac61b8469f2243832285cf99da
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180213/fc192d2a/attachment-0001.html>
More information about the Secure-testing-commits
mailing list