[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2017-18190/cups

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
79e65275 by Salvatore Bonaccorso at 2018-02-16T22:20:57+01:00
Add CVE-2017-18190/cups

Fixed in v2.2.2 upstream and the first version which landed in unstable
was 2.2.3-2.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -17,7 +17,9 @@ CVE-2018-7182
 CVE-2018-7181
 	RESERVED
 CVE-2017-18190 (A localhost.localdomain whitelist entry in valid_host() in ...)
-	TODO: check
+	- cups 2.2.3-2
+	NOTE: https://bugs.chromium.org/p/project-zero/issues/detail?id=1048
+	NOTE: https://github.com/apple/cups/commit/afa80cb2b457bf8d64f775bed307588610476c41 (v2.2.2)
 CVE-2018-7186 (Leptonica before 1.75.3 does not limit the number of characters in a %s ...)
 	- leptonlib <unfixed> (bug #890548)
 	NOTE: https://github.com/DanBloomberg/leptonica/commit/ee301cb2029db8a6289c5295daa42bba7715e99a



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/79e652750fe0b5edab36ebd4967aa0c6dc258f77

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/79e652750fe0b5edab36ebd4967aa0c6dc258f77
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180216/b97ef582/attachment.html>