From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: Git 2.17.1 security update CVE-2018-{11234,11235} Date: Tue, 29 May 2018 17:03:11 -0400 Message-ID: <20180529210311.GA20833@jasmine.lan> References: <20180529200748.GA23835@jasmine.lan> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="9amGYk9869ThD9tj" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:58012) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fNlm2-0003Bk-P1 for guix-devel@gnu.org; Tue, 29 May 2018 17:03:19 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fNllx-0002qC-Q0 for guix-devel@gnu.org; Tue, 29 May 2018 17:03:18 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:58447) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1fNllx-0002kj-H0 for guix-devel@gnu.org; Tue, 29 May 2018 17:03:13 -0400 Received: from localhost (c-76-124-202-137.hsd1.pa.comcast.net [76.124.202.137]) by mail.messagingengine.com (Postfix) with ESMTPA id 6CC7210255 for ; Tue, 29 May 2018 17:03:12 -0400 (EDT) Content-Disposition: inline In-Reply-To: <20180529200748.GA23835@jasmine.lan> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org --9amGYk9869ThD9tj Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Tue, May 29, 2018 at 04:07:48PM -0400, Leo Famulari wrote: > https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11234 > https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11235 For anyone who is confused, the original announcement on MSDN mistakenly mentioned CVE-2018-11234, which is apparently incorrect. The correct CVE IDs are CVE-2018-11233 and CVE-2018-11235. --9amGYk9869ThD9tj Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlsNwAsACgkQJkb6MLrK fwgLvRAA6me7bGxN4DZ91TqgQzjO9F00LaDChFQCcVRX2e1zyynFTHHL3NvyZgQn ht85XGWV+FkK+siOO+MlRKKsQGqqRDMKRq67Wb8MudMUifG38kBbdqFQkwVIQsaF iAhha670WeqhCeX85lHKuBUl5ODE6YNfrPFUIURfUdlzLUchYUtnwCxlVSigKv/E 0GtarcxEDn1rI0qdI6klVU58+mDA3xQ46xumINJFGj6SRPO+5YNDaqj/z+z/qmk+ E/BPteIKMsXyunwx6JKYtQY2sDHZlvjUBfqsygQL1x6oLZlNDcjGwpHGbIQlmEeu CpBARsszcQcTdWlynKUbdLHNVfS0tSt7+aCl/RrtyDF25h/oSl1Oi3kv5kc6qIQh 7zX6EyLcyieW6Ds2wGkeMm5ShcNlsVPXTTZj3Eq/q95bruIr7pIf8qntXrDB6jsI dgj1TvxYV1qFvf6ECDDJLAFgun9lzC29BXqZQl+baIDUDAAEnisQKc5zwlNiuVIO DpyNceCa2zRH6kmi14x/PV9jv4oaja/0rBunHq45Pk6HlbPzisUCQctwBCbLujD0 8cL9PgTRp0z94Ky6Nz/YrJXORo1+01DrRQ5lcmvVP02tRis+DQvg9ZrfAidh3etB TfpHaCAuFdXrgUhrgE3HIWxRNLl0eDvbO0tQFg6zUVDaelm/tWA= =+8YJ -----END PGP SIGNATURE----- --9amGYk9869ThD9tj--