Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2ca2025a by Salvatore Bonaccorso at 2018-06-13T20:40:14+02:00
Add information on CVE-2018-120{19,20}
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -543,15 +543,22 @@ CVE-2018-12021
RESERVED
CVE-2018-12020 (mainproc.c in GnuPG before 2.2.8 mishandles the original
filename ...)
{DSA-4224-1 DSA-4223-1 DSA-4222-1}
+ - enigmail <unfixed>
- gnupg2 2.2.8-1
- gnupg1 1.4.22-5 (bug #901088)
- gnupg <removed>
+ - python-gnupg <unfixed>
NOTE: https://dev.gnupg.org/T4012
NOTE:
https://lists.gnupg.org/pipermail/gnupg-announce/2018q2/000425.html
NOTE:
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=210e402acd3e284b32db1901e43bf1470e659e49
(STABLE-BRANCH-2-2)
NOTE:
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=2326851c60793653069494379b16d84e4c10a0ac
(STABLE-BRANCH-1-4)
+ NOTE: http://www.openwall.com/lists/oss-security/2018/06/13/10
+ NOTE: https://neopg.io/blog/gpg-signature-spoof/
CVE-2018-12019
RESERVED
+ - enigmail <unfixed>
+ NOTE: http://www.openwall.com/lists/oss-security/2018/06/13/10
+ NOTE: https://neopg.io/blog/enigmail-signature-spoof/
CVE-2018-12018
RESERVED
CVE-2018-12017
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/2ca2025afbbb0b91e576bb5c9d56a807b85a7f6e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/2ca2025afbbb0b91e576bb5c9d56a807b85a7f6e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
