[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Start tracking CVE-2012-6709

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
55436045 by Salvatore Bonaccorso at 2018-02-24T09:09:56+01:00
Start tracking CVE-2012-6709

This needs further investigation if both src:elinks and src:links2 are
affected by the respective problem. The Red Hat bug which originates for
the CVE is

https://bugzilla.redhat.com/show_bug.cgi?id=881399

and the used patch is when using OpenSSL.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -27,7 +27,10 @@ CVE-2018-7423
 CVE-2017-18195
 	RESERVED
 CVE-2012-6709 (ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate ...)
-	TODO: check
+	- elinks <unfixed>
+	- links2 <unfixed> (bug #694658)
+	NOTE: Patch proposed upstream (when using): http://lists.linuxfromscratch.org/pipermail/elinks-dev/2015-June/002099.html
+	TODO: Check elinks, we compile with GnuTLS
 CVE-2018-7422
 	RESERVED
 CVE-2018-7421



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/55436045b72e67d9056c364a92e33544defb0e31

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/55436045b72e67d9056c364a92e33544defb0e31
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180224/ee948094/attachment.html>