[Git][security-tracker-team/security-tracker][master] Track fix for CVE-2019-18900/libzypp via unstable

Salvatore Bonaccorso carnil at debian.org
Thu Jan 7 05:45:16 GMT 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fa4573a0 by Salvatore Bonaccorso at 2021-01-07T06:44:48+01:00
Track fix for CVE-2019-18900/libzypp via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -83648,7 +83648,7 @@ CVE-2019-18901 (A UNIX Symbolic Link (Symlink) Following vulnerability in the my
 CVE-2019-18900 (: Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS  ...)
 	{DLA-2132-1}
 	[experimental] - libzypp 17.25.5-1
-	- libzypp <unfixed> (bug #953362)
+	- libzypp 17.25.5-2 (bug #953362)
 	[buster] - libzypp <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.suse.com/show_bug.cgi?id=1158763
 	NOTE: https://github.com/openSUSE/libzypp/pull/196



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fa4573a03bd6201ecd720833519e72f903570e9b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fa4573a03bd6201ecd720833519e72f903570e9b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210107/113ff662/attachment.html>


More information about the debian-security-tracker-commits mailing list