[Git][security-tracker-team/security-tracker][master] Add bug reference for CVE-2017-18342

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
480e4d38 by Salvatore Bonaccorso at 2018-07-02T19:49:38+02:00
Add bug reference for CVE-2017-18342

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -310,7 +310,7 @@ CVE-2018-12906
 CVE-2018-12905 (joyplus-cms 1.6.0 has XSS in admin_player.php, related to ...)
 	NOT-FOR-US: joyplus-cms
 CVE-2017-18342 (In PyYAML before 4.1, the yaml.load() API could execute arbitrary code. ...)
-	- pyyaml <unfixed> (unimportant)
+	- pyyaml <unfixed> (unimportant; bug #902878)
 	NOTE: This is a well-known design deficiency in pyyaml, various CVE IDs have been assigned
 	NOTE: to applications misusing the API over the years. The CVE ID was assigned to raise
 	NOTE: awareness (and 4.1 now fixes the default behaviour as well)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/480e4d383c890afa91c5ef7fd63cc5c4f6e6c03a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/480e4d383c890afa91c5ef7fd63cc5c4f6e6c03a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180702/49522ffc/attachment.html>