Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

CVE-2018-1000825

Related Vulnerabilities: CVE-2018-1000825  

Source

Debian Bug report logs - #917023
CVE-2018-1000825

Package: freecol; Maintainer for freecol is Debian Games Team <pkg-games-devel@lists.alioth.debian.org>; Source for freecol is src:freecol (PTS, buildd, popcon).

Reported by: Moritz Muehlenhoff <jmm@debian.org>

Date: Fri, 21 Dec 2018 15:48:02 UTC

Severity: normal

Tags: security

Forwarded to https://github.com/FreeCol/freecol/issues/26

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, team@security.debian.org, Debian Games Team <pkg-games-devel@lists.alioth.debian.org>:
Bug#917023; Package freecol. (Fri, 21 Dec 2018 15:48:04 GMT) (full text, mbox, link).

Acknowledgement sent to Moritz Muehlenhoff <jmm@debian.org>:
New Bug report received and forwarded. Copy sent to team@security.debian.org, Debian Games Team <pkg-games-devel@lists.alioth.debian.org>. (Fri, 21 Dec 2018 15:48:04 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Moritz Muehlenhoff <jmm@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: CVE-2018-1000825
Date: Fri, 21 Dec 2018 16:45:05 +0100
Package: freecol
Severity: normal
Tags: security

Please see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000825:
https://0dd.zone/2018/10/28/freecol-XXE/
https://github.com/FreeCol/freecol/issues/26

This is fairly short of details and could be totally bogus; it's not really
stated whether that XML data is actually something which might potentially
come from an external source (e.g. someone sending you a save game file,
pretty far-fetched to begin with) or whether the XML data is all game data
which is shipped via the game data.

Cheers,
        Moritz

Set Bug forwarded-to-address to 'https://github.com/FreeCol/freecol/issues/26'. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Fri, 21 Dec 2018 15:57:03 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 17:24:49 2019; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook
Vulmon Logo
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started