Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9f1d674e by security tracker role at 2019-08-31T20:10:18Z
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3823,6 +3823,7 @@ CVE-2019-14467
RESERVED
CVE-2019-14466 [GOsa <= 2.7.5.2 uses unserialize to restore filter settings
from a cookie. Since this cookie is supplied by the client, authenticated users
can pass arbitrary content to unserialized, which opens GOsa up to a potential
PHP object injection.]
RESERVED
+ {DLA-1905-1}
- gosa 2.7.4+reloaded3-10
NOTE:
https://github.com/gosa-project/gosa-core/commit/e1504e9765db2adde8b4685b5c93fbba57df868b
(fix)
NOTE:
https://github.com/gosa-project/gosa-core/commit/90b674960335d888c76ca5e99027df8e7fa66f3a
(fixing the prev commit)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/9f1d674e859fcc12103c74b7a7e256618ef58831
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/9f1d674e859fcc12103c74b7a7e256618ef58831
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
