[Git][security-tracker-team/security-tracker][master] Update information on CVE-2018-20821/libsass

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9446b19e by Salvatore Bonaccorso at 2019-05-16T20:25:59Z
Update information on CVE-2018-20821/libsass

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1550,7 +1550,10 @@ CVE-2018-20822 (LibSass 3.5.4 allows attackers to cause a denial-of-service (unc
 	NOTE: https://github.com/sass/libsass/issues/2671
 CVE-2018-20821 (The parsing component in LibSass through 3.5.5 allows attackers to cau ...)
 	- libsass <unfixed>
+	[stretch] - libsass <not-affected> (Vulnerable code introduced later)
 	NOTE: https://github.com/sass/libsass/issues/2658
+	NOTE: Introduced by: https://github.com/sass/libsass/commit/efd97dae376de50b3e6ed724337c4f274a21491d (3.5.0)
+	NOTE: Fixed by: https://github.com/sass/libsass/commit/f2db04883e5fff4e03777dcc1eb60d4373c45be1
 CVE-2018-20820 (read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to c ...)
 	- lepton <unfixed> (bug #927925)
 	NOTE: https://github.com/dropbox/lepton/commit/6a5ceefac1162783fffd9506a3de39c85c725761



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9446b19eca250a2c44529475e7d3de7842469f79

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9446b19eca250a2c44529475e7d3de7842469f79
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190516/8e6095e6/attachment.html>