[Git][security-tracker-team/security-tracker][master] Add note for CVE-2018-5739/isc-kea

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
702b3437 by Salvatore Bonaccorso at 2018-07-13T21:58:36+02:00
Add note for CVE-2018-5739/isc-kea

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -22297,6 +22297,9 @@ CVE-2018-5739 [failure to release memory may exhaust system resources]
 	RESERVED
 	- isc-kea <not-affected> (Vulnerable code introduced in Kea 1.4.0)
 	NOTE: https://kb.isc.org/article/AA-01626
+	NOTE: 1.4.0-1 was uploaded to experimental as https://tracker.debian.org/news/973011
+	NOTE: Tracking bug as #903729 with RC severity so this version does
+	NOTE: not enter unstable without fix.
 CVE-2018-5738 [Some versions of BIND can improperly permit recursive query service to unauthorized clients]
 	RESERVED
 	- bind9 1:9.11.3+dfsg-2 (bug #901483)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/702b3437d797fa5ac0191dd9b54d6f62378d3682

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/702b3437d797fa5ac0191dd9b54d6f62378d3682
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180713/28ac39bd/attachment-0001.html>