[Git][security-tracker-team/security-tracker][master] Reference now current commit for CVE-2017-18640

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
191c8d93 by Salvatore Bonaccorso at 2020-02-29T21:19:09+01:00
Reference now current commit for CVE-2017-18640

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -15473,7 +15473,7 @@ CVE-2017-18640 (The Alias feature in SnakeYAML 1.18 allows entity expansion duri
 	NOTE: https://bitbucket.org/asomov/snakeyaml/issues/377/allow-configuration-for-preventing-billion
 	NOTE: Patch to introduce a configuration option to restrict aliases for
 	NOTE: collections:
-	NOTE: https://bitbucket.org/asomov/snakeyaml/commits/b680ce64971d943083012c04690c0ffa9fea6da4
+	NOTE: https://bitbucket.org/asomov/snakeyaml/commits/da11ddbd91c1f8392ea932b37fa48110fa54ed8c
 CVE-2019-19726 (OpenBSD through 6.6 allows local users to escalate to root because a c ...)
 	NOT-FOR-US: OpenBSD
 CVE-2019-19725 (sysstat through 12.2.0 has a double free in check_file_actlst in sa_co ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/191c8d93ce922f2e62b9577436620486cba4303f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/191c8d93ce922f2e62b9577436620486cba4303f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200229/85b229e5/attachment-0001.html>