[Git][security-tracker-team/security-tracker][master] Add bug reference for mercurial issues
Salvatore Bonaccorso
carnil at debian.org
Fri Jun 8 13:35:03 BST 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
fbcc03e6 by Salvatore Bonaccorso at 2018-06-08T14:34:38+02:00
Add bug reference for mercurial issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1,13 +1,13 @@
CVE-2018-XXXX [OVE-20180430-0004: mpatch: ensure fragment start isn't past the end of orig]
- - mercurial <unfixed>
+ - mercurial <unfixed> (bug #901050)
NOTE: https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.6.1_.282018-06-06.29
NOTE: https://www.mercurial-scm.org/repo/hg/rev/faa924469635
CVE-2018-XXXX [OVE-20180430-0002: mpatch: protect against underflow in mpatch_apply]
- - mercurial <unfixed>
+ - mercurial <unfixed> (bug #901050)
NOTE: https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.6.1_.282018-06-06.29
NOTE: https://www.mercurial-scm.org/repo/hg/rev/1acfc35d478c
CVE-2018-XXXX [OVE-20180430-0001: mpatch: be more careful about parsing binary patch data]
- - mercurial <unfixed>
+ - mercurial <unfixed> (bug #901050)
NOTE: https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.6.1_.282018-06-06.29
NOTE: https://www.mercurial-scm.org/repo/hg/rev/90a274965de7
CVE-2018-12049 (A remote attacker can bypass the System Manager Mode on the Canon ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/fbcc03e671faafefc575e078a91aa175189e330f
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/fbcc03e671faafefc575e078a91aa175189e330f
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180608/2e3e943b/attachment.html>
More information about the debian-security-tracker-commits
mailing list