[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2019-10768/angular.js
Salvatore Bonaccorso
carnil at debian.org
Thu Nov 21 21:21:43 GMT 2019
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e72f320d by Salvatore Bonaccorso at 2019-11-21T21:19:45Z
Add Debian bug reference for CVE-2019-10768/angular.js
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -27609,7 +27609,7 @@ CVE-2019-10770
CVE-2019-10769
RESERVED
CVE-2019-10768 (In AngularJS before 1.7.9 the function `merge()` could be tricked into ...)
- - angular.js <unfixed>
+ - angular.js <unfixed> (bug #945249)
[jessie] - angular.js <not-affected> (vulnerable code is not present, deep merging introduced later)
NOTE: https://github.com/angular/angular.js/commit/add78e62004e80bb1e16ab2dfe224afa8e513bc3
NOTE: https://snyk.io/vuln/SNYK-JS-ANGULAR-534884
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e72f320d44e6c53528381f8cbaa3db90996fb1e2
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e72f320d44e6c53528381f8cbaa3db90996fb1e2
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191121/456d243d/attachment.html>
More information about the debian-security-tracker-commits
mailing list