CVE-2018-8768

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

A security release to fix [CVE-2018-8768](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8768).

Thanks to [Alex](https://hackerone.com/pisarenko) for identifying this
bug, and Jonathan Kamens and Scott Sanderson at Quantopian for verifying
it and bringing it to our attention.

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8768
• http://openwall.com/lists/oss-security/2018/03/15/2
• https://lists.debian.org/debian-lts-announce/2020/11/msg00033.html