[Git][security-tracker-team/security-tracker][master] Mark CVE-2018-18335/firefox-esr as not-affected (MacOS specific)

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
628dd796 by Salvatore Bonaccorso at 2019-02-14T06:29:49Z
Mark CVE-2018-18335/firefox-esr as not-affected (MacOS specific)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -24120,7 +24120,7 @@ CVE-2018-18336 (Incorrect object lifecycle in PDFium in Google Chrome prior to .
 CVE-2018-18335 (Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 ...)
 	{DSA-4352-1}
 	- chromium 71.0.3578.80-1
-	- firefox-esr <unfixed>
+	- firefox-esr <not-affected> (Only affects MacOS specific which had Canvas 2D acceleration enabled)
 	- skia <itp> (bug #818180)
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2019-05/#CVE-2018-18335
 CVE-2018-18334 (A vulnerability in the Private Browser of Trend Micro Dr. Safety for ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/628dd796af122719b9a04177a9b4b4336b607871

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/628dd796af122719b9a04177a9b4b4336b607871
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190214/50568813/attachment.html>