[Git][security-tracker-team/security-tracker][master] 2 commits: Add reference to upstream commit for CVE-2017-11608/libsass to adress issue

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a09faf5d by Salvatore Bonaccorso at 2019-03-11T16:15:46Z
Add reference to upstream commit for CVE-2017-11608/libsass to adress issue

- - - - -
469cd62a by Salvatore Bonaccorso at 2019-03-11T16:16:18Z
Mark fixed version for CVE-2017-11608/libsass

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -95546,9 +95546,10 @@ CVE-2017-11610 (The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.
 CVE-2017-11609
 	RESERVED
 CVE-2017-11608 (There is a heap-based buffer over-read in the ...)
-	- libsass <unfixed> (bug #870186)
+	- libsass 3.4.6-1 (bug #870186)
 	[stretch] - libsass <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1474276
+	NOTE: https://github.com/sass/libsass/commit/648f763ede97f9a2c2c843a0a18ac18bbde3507b (3.4.6)
 CVE-2017-11607
 	RESERVED
 CVE-2017-11606



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/18d508c11fc01dea380106e658f9b03569d7896a...469cd62a441563109282cbddef421195bf32e83d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/18d508c11fc01dea380106e658f9b03569d7896a...469cd62a441563109282cbddef421195bf32e83d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190311/d6c9991f/attachment.html>