[Git][security-tracker-team/security-tracker][master] CVE-2019-1000014,rebar: Debian is not affected

[Markus Koschany]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1c4e8503 by Markus Koschany at 2019-05-05T21:41:29Z
CVE-2019-1000014,rebar: Debian is not affected

Vulnerable code is not present.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11469,7 +11469,8 @@ CVE-2019-1000016 (FFMPEG version 4.1 contains a CWE-129: Improper Validation of
 CVE-2019-1000015 (Chamilo Chamilo-lms version 1.11.8 and earlier contains a Cross Site S ...)
 	NOT-FOR-US: Chamilo Chamilo-lms
 CVE-2019-1000014 (Erlang/OTP Rebar3 version 3.7.0 through 3.7.5 contains a Signing oracl ...)
-	- rebar <undetermined>
+	- rebar <not-affected> (vulnerable code is not present)
+	NOTE: https://github.com/erlang/rebar3/pull/1986
 CVE-2019-1000013 (Hex package manager hex_core version 0.3.0 and earlier contains a Sign ...)
 	NOT-FOR-US: Hex package manager
 CVE-2019-1000012 (Hex package manager version 0.14.0 through 0.18.2 contains a Signing o ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1c4e8503a75dc3d82d1f0ca43a932dd9a84cb994

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1c4e8503a75dc3d82d1f0ca43a932dd9a84cb994
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190505/61a9f505/attachment-0001.html>