[Git][security-tracker-team/security-tracker][master] Update unstable information for CVE-2018-1084{4,5,6}
Salvatore Bonaccorso
carnil at debian.org
Wed Sep 19 21:08:50 BST 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
1b59f21e by Salvatore Bonaccorso at 2018-09-19T20:08:13Z
Update unstable information for CVE-2018-1084{4,5,6}
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -16051,22 +16051,26 @@ CVE-2018-10846 (A cache-based side channel in GnuTLS implementation that leads t
- gnutls28 <unfixed>
- gnutls26 <removed>
NOTE: https://gitlab.com/gnutls/gnutls/merge_requests/657
+ NOTE: https://gitlab.com/gnutls/gnutls/commit/ce671a6db9e47006cff152d485091141b1569f39 (master)
NOTE: The proposed fix is to introduce a new option to force encrypt-then-mac
NOTE: instead of correcting the issue.
NOTE: https://eprint.iacr.org/2018/747
CVE-2018-10845 (It was found that the GnuTLS implementation of HMAC-SHA-384 was ...)
- - gnutls28 <unfixed>
+ - gnutls28 3.5.19-1
- gnutls26 <removed>
NOTE: https://gitlab.com/gnutls/gnutls/issues/455
- NOTE: Correctly account length field https://gitlab.com/gnutls/gnutls/commit/cc14ec5ece856cb083d64e6a5a8657323da661cb
+ NOTE: https://gitlab.com/gnutls/gnutls/commit/cc14ec5ece856cb083d64e6a5a8657323da661cb (master)
+ NOTE: https://gitlab.com/gnutls/gnutls/commit/e14d85eb8b1987d86f7b1d101a0e7795675d20d4 (gnutls_3_5_19)
NOTE: https://gitlab.com/gnutls/gnutls/merge_requests/657
NOTE: https://eprint.iacr.org/2018/747
CVE-2018-10844 (It was found that the GnuTLS implementation of HMAC-SHA-256 was ...)
- - gnutls28 <unfixed>
+ - gnutls28 3.5.19-1
- gnutls26 <removed>
NOTE: https://gitlab.com/gnutls/gnutls/issues/456
- NOTE: Remove from defaults https://gitlab.com/gnutls/gnutls/commit/29ffa2a1fa4cc396c5d1563a3e5cdca0174de28b
- NOTE: https://gitlab.com/gnutls/gnutls/commit/c32a8690f9f9b05994078fe9d2e7a41b18da5b09
+ NOTE: https://gitlab.com/gnutls/gnutls/commit/29ffa2a1fa4cc396c5d1563a3e5cdca0174de28b (master)
+ NOTE: https://gitlab.com/gnutls/gnutls/commit/c32a8690f9f9b05994078fe9d2e7a41b18da5b09 (master)
+ NOTE: https://gitlab.com/gnutls/gnutls/commit/c433cdf92349afae66c703bdacedf987f423605e (gnutls_3_5_19)
+ NOTE: https://gitlab.com/gnutls/gnutls/commit/c2e094acd68f7159025b2e2556d6fb4427b41dd7 (gnutls_3_5_19)
NOTE: https://gitlab.com/gnutls/gnutls/merge_requests/657
NOTE: https://eprint.iacr.org/2018/747
CVE-2018-10843 (source-to-image component of Openshift Container Platform before ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1b59f21efe1f6fc62c23d3833ea875b662b68676
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1b59f21efe1f6fc62c23d3833ea875b662b68676
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180919/c3801f0f/attachment.html>
More information about the debian-security-tracker-commits
mailing list