Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b89fbd2a by Moritz Muehlenhoff at 2019-08-16T06:55:03Z
new nginx issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -16999,7 +16999,9 @@ CVE-2019-9517 (Some HTTP/2 implementations are
vulnerable to unconstrained inter
NOTE: Affects upstream versions 2.4.20 to 2.4.39
NOTE:
https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
CVE-2019-9516 (Some HTTP/2 implementations are vulnerable to a header leak,
potential ...)
- TODO: check
+ - nginx <unfixed>
+ NOTE:
https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/
+ TODO: check for more
CVE-2019-9515 (Some HTTP/2 implementations are vulnerable to a settings flood,
potent ...)
TODO: check
CVE-2019-9514 (Some HTTP/2 implementations are vulnerable to a reset flood,
potential ...)
@@ -17014,7 +17016,9 @@ CVE-2019-9514 (Some HTTP/2 implementations are
vulnerable to a reset flood, pote
NOTE:
https://github.com/golang/go/commit/e152b01a468a1c18a290bf9aec52ccea7693c7f2
(golang-1.11)
NOTE:
https://github.com/golang/go/commit/7139b45d1410ded14e1e131151fd8dfc435ede6c
(golang-1.12)
CVE-2019-9513 (Some HTTP/2 implementations are vulnerable to resource loops,
potentia ...)
- TODO: check
+ - nginx <unfixed>
+ NOTE:
https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/
+ TODO: check for more
CVE-2019-9512 (Some HTTP/2 implementations are vulnerable to ping floods,
potentially ...)
- golang-1.13 <unfixed>
- golang-1.12 1.12.8-1
@@ -17027,7 +17031,9 @@ CVE-2019-9512 (Some HTTP/2 implementations are
vulnerable to ping floods, potent
NOTE:
https://github.com/golang/go/commit/e152b01a468a1c18a290bf9aec52ccea7693c7f2
(golang-1.11)
NOTE:
https://github.com/golang/go/commit/7139b45d1410ded14e1e131151fd8dfc435ede6c
(golang-1.12)
CVE-2019-9511 (Some HTTP/2 implementations are vulnerable to window size
manipulation ...)
- TODO: check
+ - nginx <unfixed>
+ NOTE:
https://www.nginx.com/blog/nginx-updates-mitigate-august-2019-http-2-vulnerabilities/
+ TODO: check for more
CVE-2019-9510
RESERVED
CVE-2019-9509
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/b89fbd2aff69ded823a74334de63ed603df0e371
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/b89fbd2aff69ded823a74334de63ed603df0e371
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
