[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add new dovecot issue (CVE-2017-15132)

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e3e58713 by Salvatore Bonaccorso at 2018-01-25T13:24:37+01:00
Add new dovecot issue (CVE-2017-15132)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -21929,8 +21929,11 @@ CVE-2017-15134 [Remote DoS via search filters in slapi_filter_sprintf in slapd/u
 	- 389-ds-base <unfixed>
 CVE-2017-15133
 	RESERVED
-CVE-2017-15132
+CVE-2017-15132 [dovecot: auth client leaks memory if SASL authentication is aborted]
 	RESERVED
+	- dovecot <unfixed>
+	NOTE: https://github.com/dovecot/core/commit/1a29ed2f96da1be22fa5a4d96c7583aa81b8b060.patch
+	NOTE: http://www.openwall.com/lists/oss-security/2018/01/25/4
 CVE-2017-15131 (It was found that system umask policy is not being honored when ...)
 	- xdg-user-dirs <unfixed> (unimportant)
 	NOTE: The CVE relates that created directories by xdg-user-dirs might not



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e3e5871353507402edfb1514759546a41895cf5c

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e3e5871353507402edfb1514759546a41895cf5c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180125/fc4435dc/attachment.html>