[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Reference fix for CVE-2018-5345/gcab

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
979115d1 by Salvatore Bonaccorso at 2018-01-23T21:55:11+01:00
Reference fix for CVE-2018-5345/gcab

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1654,6 +1654,7 @@ CVE-2018-1000001 [Libc Realpath Buffer Underflow]
 	NOTE: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=52a713fdd0a30e1bd79818e2e3c4ab44ddca1a94
 CVE-2018-5345 (A stack-based buffer overflow within GNOME gcab through 0.7.4 can be ...)
 	- gcab 0.7-7 (bug #887776)
+	NOTE: https://git.gnome.org/browse/gcab/commit/?id=bd2abee5f0a9b5cbe3a1ab1f338c4fb8f6ca797b
 CVE-2018-5344 (In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles ...)
 	- linux <unfixed>
 	[jessie] - linux <not-affected> (Vulnerability introduced later)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/979115d15c7e8eeb759ce241af73c329973d6b83

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/979115d15c7e8eeb759ce241af73c329973d6b83
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180123/2c76b562/attachment.html>