[Git][security-tracker-team/security-tracker][master] 2 commits: Reference patch review thread

Salvatore Bonaccorso carnil at debian.org
Fri Jul 20 23:26:02 BST 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f8579a7a by Salvatore Bonaccorso at 2018-07-21T00:23:51+02:00
Reference patch review thread

- - - - -
48dfa53c by Salvatore Bonaccorso at 2018-07-21T00:25:36+02:00
Mark CVE-2018-10893 as no-dsa for stretch

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -8981,7 +8981,9 @@ CVE-2018-10894
 CVE-2018-10893 [Insufficient encoding checks for LZ can cause different integer/buffer overflows]
 	RESERVED
 	- spice-gtk <unfixed> (bug #904161)
+	[stretch] - spice-gtk <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1598234
+	NOTE: Ongoing patch review: https://lists.freedesktop.org/archives/spice-devel/2018-July/044489.html
 CVE-2018-10892 (The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby ...)
 	- docker.io <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1598581



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/8839a1f7b12f3cc85875c0b05dca27bab21d71d0...48dfa53c564eeec6273741df93fc02ac64f5c401

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/8839a1f7b12f3cc85875c0b05dca27bab21d71d0...48dfa53c564eeec6273741df93fc02ac64f5c401
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180720/a1c57264/attachment.html>


More information about the debian-security-tracker-commits mailing list