Page Menu
Home
FreeBSD
Search
Configure Global Search
Log In
Files
F173345619
D15668.diff
No One
Temporary
Actions
View File
Edit File
Delete File
View Transforms
Subscribe
Mute Notifications
Flag For Later
Award Token
Size
1 KB
Referenced Files
None
Subscribers
None
D15668.diff
View Options
Index: vuln.xml
===================================================================
--- vuln.xml
+++ vuln.xml
@@ -58,6 +58,33 @@
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="5a1589ad-68f9-11e8-83f5-d8cb8abf62dd">
+ <topic>Libgit2 -- Fxing insufficient validation of submodule names</topic>
+ <affects>
+ <package>
+ <name>libgit2</name>
+ <name>py-pygit2</name>
+ <range><lt>0.27.1</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>The Git community reports:</p>
+ <blockquote cite="https://github.com/libgit2/libgit2/releases/tag/v0.27.1">
+ <p>Insufficient validation of submodule names</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <url>https://github.com/libgit2/libgit2/releases/tag/v0.27.1</url>
+ <cvename>CVE-2018-11235</cvename>
+ </references>
+ <dates>
+ <discovery>2018-05-29</discovery>
+ <entry>2018-06-05</entry>
+ </dates>
+ </vuln>
+
<vuln vid="c7a135f4-66a4-11e8-9e63-3085a9a47796">
<topic>Git -- Fix memory out-of-bounds and remote code execution vulnerabilities (CVE-2018-11233 and CVE-2018-11235)</topic>
<affects>
File Metadata
Details
Attached
Mime Type
text/plain
Expires
Sat, Sep 26, 8:59 AM (39 m, 45 s)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
39652032
Default Alt Text
D15668.diff (1 KB)
Attached To
Mode
D15668: Document vulnerability for libgit2 and py-pygit2
Attached
Detach File
Event Timeline
Log In to Comment