[Git][security-tracker-team/security-tracker][master] Add information for CVE-2018-10895

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6c66a6a1 by Salvatore Bonaccorso at 2018-07-11T20:55:28+02:00
Add information for CVE-2018-10895

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -7409,10 +7409,12 @@ CVE-2018-10897
 CVE-2018-10896
 	RESERVED
 	NOT-FOR-US: Red Hat-specific packaging flaw of cloud-init default config
-CVE-2018-10895
+CVE-2018-10895 [Remote code execution due to CSRF in qutebrowser]
 	RESERVED
 	- qutebrowser 1.4.1-1
 	NOTE: http://www.openwall.com/lists/oss-security/2018/07/11/7
+	NOTE: Introduced in: https://github.com/qutebrowser/qutebrowser/commit/ffc29ee (v1.0.0)
+	NOTE: Fixed in: https://github.com/qutebrowser/qutebrowser/commit/43e58ac865ff862c2008c510fc5f7627e10b4660 (v1.4.1)
 CVE-2018-10894
 	RESERVED
 	NOT-FOR-US: Keycloak



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6c66a6a11fc6c48a38ba61ba681032b1fa890f29

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6c66a6a11fc6c48a38ba61ba681032b1fa890f29
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180711/0609e779/attachment.html>