Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5e44f0c2 by Salvatore Bonaccorso at 2019-07-01T14:09:24Z
Add CVE-2019-12781/python-django
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -828,8 +828,14 @@ CVE-2019-12783
RESERVED
CVE-2019-12782
RESERVED
-CVE-2019-12781
- RESERVED
+CVE-2019-12781 [Incorrect HTTP detection with reverse-proxy connecting via
HTTPS]
+ RESERVED
+ - python-django <unfixed>
+ NOTE:
https://www.djangoproject.com/weblog/2019/jul/01/security-releases/
+ NOTE:
https://github.com/django/django/commit/54d0f5e62f54c29a12dd96f44bacd810cbe03ac8
(master)
+ NOTE:
https://github.com/django/django/commit/77706a3e4766da5d5fb75c4db22a0a59a28e6cd6
(2.2)
+ NOTE:
https://github.com/django/django/commit/1e40f427bb8d0fb37cc9f830096a97c36c97af6f
(2.1)
+ NOTE:
https://github.com/django/django/commit/32124fc41e75074141b05f10fc55a4f01ff7f050
(1.11)
CVE-2019-12780 (The Belkin Wemo Enabled Crock-Pot allows command injection in
the Wemo ...)
NOT-FOR-US: Belkin Wemo Enabled Crock-Pot
CVE-2019-5439 (A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash
which ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/5e44f0c20c40802807d919146a65e15289090bd2
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/5e44f0c20c40802807d919146a65e15289090bd2
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
