[Git][security-tracker-team/security-tracker][master] Mark CVE-2018-11499 as not-affected for stretch
Salvatore Bonaccorso
carnil at debian.org
Sun May 27 10:01:27 BST 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e9c56a6a by Salvatore Bonaccorso at 2018-05-27T11:00:08+02:00
Mark CVE-2018-11499 as not-affected for stretch
The issue was introduced only in 3.4.7 upstream.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -16,6 +16,7 @@ CVE-2018-11500 (An issue was discovered in PublicCMS V4.0.20180210. There is a C
NOT-FOR-US: PublicCMS
CVE-2018-11499 (A use-after-free vulnerability exists in handle_error() in ...)
- libsass <unfixed> (bug #900182)
+ [stretch] - libsass <not-affected> (Vulnerability introduced in 3.4.7 upstream)
NOTE: https://github.com/sass/libsass/issues/2643
CVE-2018-11498 (In Lizard v1.0 and LZ5 v2.0 (the prior release, before the product was ...)
TODO: check
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e9c56a6a6393b399769282e9b787116d3cd3c30d
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e9c56a6a6393b399769282e9b787116d3cd3c30d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180527/8c2e37f3/attachment.html>
More information about the debian-security-tracker-commits
mailing list