Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 541a2462 by Salvatore Bonaccorso at 2019-02-03T20:17:26Z Add CVE-2019-7313/buildbot - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,5 +1,9 @@ CVE-2019-7313 (www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the ...) - TODO: check + - buildbot <unfixed> + [stretch] - buildbot <not-affected> (Vulnerable code introduced in 0.9.0) + [jessie] - buildbot <not-affected> (Vulnerable code introduced in 0.9.0) + NOTE: https://github.com/buildbot/buildbot/wiki/CRLF-injection-in-Buildbot-login-and-logout-redirect-code + NOTE: https://github.com/buildbot/buildbot/pull/4584/files#diff-a2e7e3ee5f6a1d3cd9c6abf0328c21e0 CVE-2019-7312 (Limited plaintext disclosure exists in PRIMX Zed Entreprise for Windows ...) TODO: check CVE-2019-7311 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/541a2462aecbd50e0ee7b4567238b78c5cd992af -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/541a2462aecbd50e0ee7b4567238b78c5cd992af You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
