[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Reserve DSA number for quagga update

Salvatore Bonaccorso carnil at debian.org
Thu Feb 15 22:03:11 UTC 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ca64a654 by Salvatore Bonaccorso at 2018-02-15T23:02:23+01:00
Reserve DSA number for quagga update

- - - - -


2 changed files:

- data/CVE/list
- data/DSA/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -4707,6 +4707,7 @@ CVE-2018-5379 [Fix double free of unknown attribute]
 CVE-2018-5378 [invalid attr length sends NOTIFY with data overrun]
 	RESERVED
 	- quagga <unfixed>
+	[stretch] - quagga 1.1.1-3+deb9u2
 	[jessie] - quagga <not-affected> (Vulnerable code not present)
 	[wheezy] - quagga <not-affected> (Vulnerable code not present)
 	NOTE: https://www.quagga.net/security/Quagga-2018-0543.txt


=====================================
data/DSA/list
=====================================
--- a/data/DSA/list
+++ b/data/DSA/list
@@ -1,3 +1,7 @@
+[15 Feb 2018] DSA-4115-1 quagga - security update
+	{CVE-2018-5379 CVE-2018-5380 CVE-2018-5381}
+	[jessie] - quagga 0.99.23.1-1+deb8u5
+	[stretch] - quagga 1.1.1-3+deb9u2
 [15 Feb 2018] DSA-4114-1 jackson-databind - security update
 	{CVE-2017-17485 CVE-2018-5968}
 	[jessie] - jackson-databind 2.4.2-2+deb8u3



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ca64a65483a61e14874eb05213e3285614a7018c

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ca64a65483a61e14874eb05213e3285614a7018c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180215/a2177945/attachment.html>


More information about the Secure-testing-commits mailing list