Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
79c24aad by Salvatore Bonaccorso at 2018-03-28T06:53:00+02:00
Reclassify CVE-2018-0733 according to maintainers update
Consider it as affected in source, but not for the binary packages
(might for the ports).
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -22929,8 +22929,11 @@ CVE-2018-0734
RESERVED
CVE-2018-0733 [Incorrect CRYPTO_memcmp on HP-UX PA-RISC]
RESERVED
- - openssl <not-affected> (Specific to HP-UX)
- - openssl1.0 <not-affected> (Specific to HP-UX)
+ - openssl 1.1.0h-1 (unimportant)
+ [jessie] - openssl <not-affected> (vulnerable code not present)
+ [wheezy] - openssl <not-affected> (vulnerable code not present)
+ - openssl1.0 <not-affected> (Only affects OpenSSL 1.1.0)
+ NOTE: Issue specific to HP-UX
NOTE: https://www.openssl.org/news/secadv/20180327.txt
CVE-2018-0732
RESERVED
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/79c24aad05d8061f4982768d3382ff008da6db79
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/79c24aad05d8061f4982768d3382ff008da6db79
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
