[Git][security-tracker-team/security-tracker][master] new binutils issues

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
45ccb82b by Moritz Muehlenhoff at 2018-06-25T16:49:02+02:00
new binutils issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -68,13 +68,25 @@ CVE-2018-12702
 CVE-2018-12701
 	RESERVED
 CVE-2018-12700 (A Stack Exhaustion issue was discovered in debug_write_type in debug.c ...)
-	TODO: check
+	- binutils <unfixed> (low)
+	[stretch] - binutils <ignored> (Minor issue)
+	NOTE: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454
+	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=23057
 CVE-2018-12699 (finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a ...)
-	TODO: check
+	- binutils <unfixed> (low)
+	[stretch] - binutils <ignored> (Minor issue)
+	NOTE: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454
+	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=23057
 CVE-2018-12698 (demangle_template in cplus-dem.c in GNU libiberty, as distributed in ...)
-	TODO: check
+	- binutils <unfixed> (low)
+	[stretch] - binutils <ignored> (Minor issue)
+	NOTE: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454
+	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=23057
 CVE-2018-12697 (A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) ...)
-	TODO: check
+	- binutils <unfixed> (low)
+	[stretch] - binutils <ignored> (Minor issue)
+	NOTE: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454
+	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=23057
 CVE-2018-12696 (mao10cms 6 allows XSS via the article page. ...)
 	NOT-FOR-US: mao10cms
 CVE-2018-12695 (mao10cms 6 allows XSS via the m=bbs&a=index page. ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/45ccb82be07089f226d5c9312ef151036352c583

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/45ccb82be07089f226d5c9312ef151036352c583
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180625/80d5c558/attachment.html>