[Git][security-tracker-team/security-tracker][master] Add information on CVE-2018-120{19,20}

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2ca2025a by Salvatore Bonaccorso at 2018-06-13T20:40:14+02:00
Add information on CVE-2018-120{19,20}

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -543,15 +543,22 @@ CVE-2018-12021
 	RESERVED
 CVE-2018-12020 (mainproc.c in GnuPG before 2.2.8 mishandles the original filename ...)
 	{DSA-4224-1 DSA-4223-1 DSA-4222-1}
+	- enigmail <unfixed>
 	- gnupg2 2.2.8-1
 	- gnupg1 1.4.22-5 (bug #901088)
 	- gnupg <removed>
+	- python-gnupg <unfixed>
 	NOTE: https://dev.gnupg.org/T4012
 	NOTE: https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000425.html
 	NOTE: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=210e402acd3e284b32db1901e43bf1470e659e49 (STABLE-BRANCH-2-2)
 	NOTE: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=2326851c60793653069494379b16d84e4c10a0ac (STABLE-BRANCH-1-4)
+	NOTE: http://www.openwall.com/lists/oss-security/2018/06/13/10
+	NOTE: https://neopg.io/blog/gpg-signature-spoof/
 CVE-2018-12019
 	RESERVED
+	- enigmail <unfixed>
+	NOTE: http://www.openwall.com/lists/oss-security/2018/06/13/10
+	NOTE: https://neopg.io/blog/enigmail-signature-spoof/
 CVE-2018-12018
 	RESERVED
 CVE-2018-12017



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2ca2025afbbb0b91e576bb5c9d56a807b85a7f6e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2ca2025afbbb0b91e576bb5c9d56a807b85a7f6e
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180613/3a432aa4/attachment.html>