[Git][security-tracker-team/security-tracker][master] Add CVE-2020-27618/glibc

Salvatore Bonaccorso carnil at debian.org
Tue Nov 3 07:24:34 GMT 2020



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4f0e1e58 by Salvatore Bonaccorso at 2020-11-03T08:23:54+01:00
Add CVE-2020-27618/glibc

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1519,8 +1519,10 @@ CVE-2020-27619 (In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.p
 	NOTE: https://github.com/python/cpython/commit/43e523103886af66d6c27cd72431b5d9d14cd2a9 (3.7)
 	NOTE: https://bugs.python.org/issue41944
 	NOTE: Only affects the testsuite
-CVE-2020-27618
+CVE-2020-27618 [iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop]
 	RESERVED
+	- glibc <unfixed>
+	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=26224
 CVE-2020-27617 [net: an assert failure via eth_get_gso_type]
 	RESERVED
 	- qemu <unfixed> (bug #973324)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4f0e1e584166725e67db73f5217d98deb1cb04fd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4f0e1e584166725e67db73f5217d98deb1cb04fd
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201103/0d0bbe4c/attachment.html>


More information about the debian-security-tracker-commits mailing list