[Git][security-tracker-team/security-tracker][master] add upstream fix for issue in R Windows GUI

Moritz Muehlenhoff jmm at debian.org
Thu May 3 12:39:23 BST 2018


Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
152df534 by Moritz Muehlenhoff at 2018-05-03T13:38:52+02:00
add upstream fix for issue in R Windows GUI

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -3861,6 +3861,7 @@ CVE-2018-9061
 CVE-2018-9060 (R 3.4.4 suffers from a local buffer overflow that allows code ...)
 	- r-base <not-affected> (R on Linux doesn't ship the GUI, likely non-issue for Windows as well, see #897254)
 	NOTE: https://github.com/bzyo/CVE-PoCs/tree/master/CVE-2018-9060
+	NOTE: https://github.com/wch/r-source/commit/c7263b067451b9cd553c4f42dd2b54b82689fbb4
 CVE-2018-9059 (Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 ...)
 	NOT-FOR-US: Easy File Sharing (EFS)
 CVE-2018-9058 (In Long Range Zip (aka lrzip) 0.631, there is an infinite loop in the ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/152df534352bdef8a8ef0573359c74112f0f1000

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/152df534352bdef8a8ef0573359c74112f0f1000
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180503/ef5aad75/attachment.html>


More information about the debian-security-tracker-commits mailing list