Hi Chris, On Tue, Jun 26, 2018 at 10:15:07PM +0100, Chris Lamb wrote: > Hi security-team, > > Not sure why but in an automatic update of data/CVE/list, > CVE-2018-12326 was marked as being fixed in DSA-4230-1. However, this > only fixes CVE-2018-11218 & CVE-2018-11219.
Why? The patch was already shipped in DSA 4230 (0009-Security-fix-redis-cli..), only the CVE ID wasn't known at the time. Cheers, Moritz