Page MenuHomeFreeBSD

D15668.diff
No OneTemporary

D15668.diff

Index: vuln.xml
===================================================================
--- vuln.xml
+++ vuln.xml
@@ -58,6 +58,33 @@
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="5a1589ad-68f9-11e8-83f5-d8cb8abf62dd">
+ <topic>Libgit2 -- Fxing insufficient validation of submodule names</topic>
+ <affects>
+ <package>
+ <name>libgit2</name>
+ <name>py-pygit2</name>
+ <range><lt>0.27.1</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>The Git community reports:</p>
+ <blockquote cite="https://github.com/libgit2/libgit2/releases/tag/v0.27.1">
+ <p>Insufficient validation of submodule names</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <url>https://github.com/libgit2/libgit2/releases/tag/v0.27.1</url>
+ <cvename>CVE-2018-11235</cvename>
+ </references>
+ <dates>
+ <discovery>2018-05-29</discovery>
+ <entry>2018-06-05</entry>
+ </dates>
+ </vuln>
+
<vuln vid="c7a135f4-66a4-11e8-9e63-3085a9a47796">
<topic>Git -- Fix memory out-of-bounds and remote code execution vulnerabilities (CVE-2018-11233 and CVE-2018-11235)</topic>
<affects>

File Metadata

Mime Type
text/plain
Expires
Sat, Sep 26, 8:59 AM (39 m, 45 s)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
39652032
Default Alt Text
D15668.diff (1 KB)

Event Timeline