[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Reference upstream commits for the four Quagga advisories

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
44254fbd by Salvatore Bonaccorso at 2018-02-16T00:37:25+01:00
Reference upstream commits for the four Quagga advisories

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -4696,14 +4696,17 @@ CVE-2018-5381 [fix infinite loop on certain invalid OPEN messages]
 	RESERVED
 	- quagga <unfixed> (bug #890563)
 	NOTE: https://www.quagga.net/security/Quagga-2018-1975.txt
+	NOTE: https://git.savannah.gnu.org/cgit/quagga.git/commit/?id=ce07207c50a3d1f05d6dd49b5294282e59749787
 CVE-2018-5380 [debug print of received NOTIFY data can over-read msg array]
 	RESERVED
 	- quagga <unfixed> (bug #890563)
 	NOTE: https://www.quagga.net/security/Quagga-2018-1550.txt
+	NOTE: https://git.savannah.gnu.org/cgit/quagga.git/commit/?id=9e5251151894aefdf8e9392a2371615222119ad8
 CVE-2018-5379 [Fix double free of unknown attribute]
 	RESERVED
 	- quagga <unfixed> (bug #890563)
 	NOTE: https://www.quagga.net/security/Quagga-2018-1114.txt
+	NOTE: https://git.savannah.gnu.org/cgit/quagga.git/commit/?id=e69b535f92eafb599329bf725d9b4c6fd5d7fded
 CVE-2018-5378 [invalid attr length sends NOTIFY with data overrun]
 	RESERVED
 	- quagga <unfixed> (bug #890563)
@@ -4711,6 +4714,7 @@ CVE-2018-5378 [invalid attr length sends NOTIFY with data overrun]
 	[jessie] - quagga <not-affected> (Vulnerable code not present)
 	[wheezy] - quagga <not-affected> (Vulnerable code not present)
 	NOTE: https://www.quagga.net/security/Quagga-2018-0543.txt
+	NOTE: https://git.savannah.gnu.org/cgit/quagga.git/commit/?id=cc2e6770697e343f4af534114ab7e633d5beabec
 CVE-2018-5377 (Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access ...)
 	NOT-FOR-US: Discuz! DiscuzX
 CVE-2018-5376 (Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_upload.php ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/44254fbd484b3f6f728f5f5d3610081227997f1f

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/44254fbd484b3f6f728f5f5d3610081227997f1f
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180215/ab73a0eb/attachment.html>