[Git][security-tracker-team/security-tracker][master] 2 commits: Add reference to upstream advisory for zsh issues

Salvatore Bonaccorso carnil at debian.org
Wed Sep 5 05:11:40 BST 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a5d3a38e by Salvatore Bonaccorso at 2018-09-05T04:10:59Z
Add reference to upstream advisory for zsh issues

- - - - -
ad7d2ee4 by Salvatore Bonaccorso at 2018-09-05T04:11:22Z
Add bug reference for zsh

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7656,8 +7656,9 @@ CVE-2018-13260
 	RESERVED
 CVE-2018-13259 [zsh shebang line expansion (#alphabetagamma)]
 	RESERVED
-	- zsh 5.6-1
+	- zsh 5.6-1 (bug #908000)
 	[stretch] - zsh <no-dsa> (Minor issue)
+	NOTE: https://www.zsh.org/mla/zsh-announce/136
 	NOTE: https://sourceforge.net/p/zsh/code/ci/1c4c7b6a4d17294df028322b70c53803a402233d
 CVE-2018-13258
 	RESERVED
@@ -44112,8 +44113,9 @@ CVE-2018-0503
 	RESERVED
 CVE-2018-0502 [zsh shebang line expansion (#!foo\nbar)]
 	RESERVED
-	- zsh 5.6-1
+	- zsh 5.6-1 (bug #908000)
 	[stretch] - zsh <no-dsa> (Minor issue)
+	NOTE: https://www.zsh.org/mla/zsh-announce/136
 	NOTE: https://sourceforge.net/p/zsh/code/ci/1c4c7b6a4d17294df028322b70c53803a402233d
 CVE-2018-0501 (The mirror:// method implementation in Advanced Package Tool (APT) ...)
 	- apt 1.6.4



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/32c4fbdd30751a7c244279c2da9c5e13ddd2e8a2...ad7d2ee48ac1b4cbb38f63d12de3eb39f490d60f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/32c4fbdd30751a7c244279c2da9c5e13ddd2e8a2...ad7d2ee48ac1b4cbb38f63d12de3eb39f490d60f
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180905/5e178fff/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list