[Git][security-tracker-team/security-tracker][master] Add CVE-2019-12312/libreswan

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9e7e49cf by Salvatore Bonaccorso at 2019-05-24T20:59:44Z
Add CVE-2019-12312/libreswan

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -17,7 +17,9 @@ CVE-2019-12314 (Deltek Maconomy 2.2.5 is prone to local file inclusion via absol
 CVE-2019-12313 (XSS exists in Shave before 2.5.3 because output encoding is mishandled ...)
 	TODO: check
 CVE-2019-12312 (In Libreswan before 3.28, an assertion failure can lead to a pluto IKE ...)
-	TODO: check
+	- libreswan <unfixed>
+	NOTE: https://github.com/libreswan/libreswan/issues/246
+	NOTE: https://github.com/libreswan/libreswan/commit/7142d2c37d58cf024595a7549f0fb0d3946682f8
 CVE-2017-18375 (Ampache 3.8.3 allows PHP Object Instantiation via democratic.ajax.php  ...)
 	- ampache <removed>
 CVE-2016-10759 (The Xinha plugin in Precurio 2.1 allows Directory Traversal, with resu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9e7e49cfdbcdbcb64d3234de686a47eac8712c53

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9e7e49cfdbcdbcb64d3234de686a47eac8712c53
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190524/312c0d19/attachment.html>