[Git][security-tracker-team/security-tracker][master] CVE-2018-11039/libspring-java: reference tracker and commits

[Sylvain Beucler]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9db23ade by Sylvain Beucler at 2021-04-16T12:39:56+02:00
CVE-2018-11039/libspring-java: reference tracker and commits

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -186680,6 +186680,10 @@ CVE-2018-11039 (Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x
 	[stretch] - libspring-java <no-dsa> (Minor issue)
 	[jessie] - libspring-java <no-dsa> (Minor issue)
 	NOTE: https://pivotal.io/security/cve-2018-11039
+	NOTE: https://jira.spring.io/si/jira.issueviews:issue-html/SPR-16836/SPR-16836.html
+	NOTE: https://github.com/spring-projects/spring-framework/commit/f64fa3dea10af125d612d3a997aece93d21bc875 (v5.1)
+	NOTE: https://github.com/spring-projects/spring-framework/commit/a5cd01a4c857aaaba7ccc51545fc73dd25b5cba5 (v5.1)
+	NOTE: https://github.com/spring-projects/spring-framework/commit/323ccf99e575343f63d56e229c25c35c170b7ec1 (v4.3.18)
 CVE-2017-18270 (In the Linux kernel before 4.13.5, a local user could create keyrings  ...)
 	- linux 4.13.10-1
 	[stretch] - linux 4.9.65-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9db23ade5ec891417adcb71a5aae8fdc2228b4aa

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9db23ade5ec891417adcb71a5aae8fdc2228b4aa
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210416/57415b57/attachment-0001.htm>