[Git][security-tracker-team/security-tracker][master] Add mercurial entries for at least three of the commits, 7 in total have (SEC) markings

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
71dac9ac by Salvatore Bonaccorso at 2018-06-08T14:26:57+02:00
Add mercurial entries for at least three of the commits, 7 in total have (SEC) markings

For three at least there seem to be need of a CVE, in total there 7
changesets marked with (SEC) wich might be potentially needing a
identifier.

https://www.mercurial-scm.org/repo/hg/rev/9c5ced5276d6
https://www.mercurial-scm.org/repo/hg/rev/59837a16896d
https://www.mercurial-scm.org/repo/hg/rev/7f22ef3c0ee7
https://www.mercurial-scm.org/repo/hg/rev/0b208c13781c
https://www.mercurial-scm.org/repo/hg/rev/faa924469635
https://www.mercurial-scm.org/repo/hg/rev/1acfc35d478c
https://www.mercurial-scm.org/repo/hg/rev/90a274965de7

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,5 +1,14 @@
-CVE-2018-XXXX [mpatch: be more careful about parsing binary patch data]
+CVE-2018-XXXX [OVE-20180430-0004: mpatch: ensure fragment start isn't past the end of orig]
 	- mercurial <unfixed>
+	NOTE: https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.6.1_.282018-06-06.29
+	NOTE: https://www.mercurial-scm.org/repo/hg/rev/faa924469635
+CVE-2018-XXXX [OVE-20180430-0002: mpatch: protect against underflow in mpatch_apply]
+	- mercurial <unfixed>
+	NOTE: https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.6.1_.282018-06-06.29
+	NOTE: https://www.mercurial-scm.org/repo/hg/rev/1acfc35d478c
+CVE-2018-XXXX [OVE-20180430-0001: mpatch: be more careful about parsing binary patch data]
+	- mercurial <unfixed>
+	NOTE: https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.6.1_.282018-06-06.29
 	NOTE: https://www.mercurial-scm.org/repo/hg/rev/90a274965de7
 CVE-2018-12049 (A remote attacker can bypass the System Manager Mode on the Canon ...)
 	TODO: check



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/71dac9ac73e4d0244a56e892df15755da4a125f5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/71dac9ac73e4d0244a56e892df15755da4a125f5
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180608/3d32c170/attachment.html>