[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-1000005/curl

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
493e516f by Salvatore Bonaccorso at 2018-01-24T08:15:57+01:00
Add CVE-2018-1000005/curl

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1077,8 +1077,11 @@ CVE-2018-5733
 	RESERVED
 CVE-2018-5732
 	RESERVED
-CVE-2018-1000005
+CVE-2018-1000005 [HTTP/2 trailer out-of-bounds read]
 	RESERVED
+	- curl <unfixed>
+	NOTE: https://curl.haxx.se/docs/adv_2018-824a.html
+	NOTE: Patch: https://github.com/curl/curl/commit/fa3dbb9a147488a294.patch
 CVE-2018-5731
 	RESERVED
 CVE-2018-5730



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/493e516ff83e41bb287c85f7a75236840eb22aed

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/493e516ff83e41bb287c85f7a75236840eb22aed
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180124/098b0c1a/attachment.html>