Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 1a801dcc by Salvatore Bonaccorso at 2018-01-13T09:33:02+01:00 Add CVE-2017-9274/osc - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== --- a/data/CVE/list +++ b/data/CVE/list @@ -37327,8 +37327,13 @@ CVE-2017-9276 RESERVED CVE-2017-9275 RESERVED -CVE-2017-9274 +CVE-2017-9274 [osc executes spec code during "osc commit"] RESERVED + - osc <unfixed> + NOTE: Details in https://bugzilla.novell.com/show_bug.cgi?id=938556 + NOTE: SUSE adressed the issue not only in the obs-service-source_validator + NOTE: and adding a validation in 0.162.0 when using OBS 2.9, cf.: + NOTE: https://github.com/openSUSE/osc/commit/f0325eb0b58c266eb0905ccf827dc7eb864378a1 CVE-2017-9273 (The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be ...) NOT-FOR-US: IDM CVE-2017-9272 (The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1a801dcc9ff07dc0a10fa6bc03aaab49aac32c75 --- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1a801dcc9ff07dc0a10fa6bc03aaab49aac32c75 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits