[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-7485/unixodbc

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dc43c13d by Salvatore Bonaccorso at 2018-02-26T23:00:59+01:00
Add CVE-2018-7485/unixodbc

Kept TODO since needs a closer review yet.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -16,6 +16,8 @@ CVE-2018-7487 (There is a heap-based buffer overflow in the LoadPCX function of 
 CVE-2018-7486 (Blue River Mura CMS before v7.0.7029 supports inline function calls ...)
 	NOT-FOR-US: Blue River Mura CMS
 CVE-2018-7485 (The SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c in unixODBC ...)
+	- unixodbc <unfixed>
+	NOTE: https://github.com/lurcher/unixODBC/commit/45ef78e037f578b15fc58938a3a3251655e71d6f#diff-d52750c7ba4e594410438569d8e2963aL24
 	TODO: check
 CVE-2017-18201 (An issue was discovered in GNU libcdio before 2.0.0. There is a double ...)
 	TODO: check



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/dc43c13d886b5c7f25cde269a40742d00bcb34e9

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/dc43c13d886b5c7f25cde269a40742d00bcb34e9
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180226/91734392/attachment.html>