Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ddfc00ce by Moritz Muehlenhoff at 2019-11-11T10:55:17Z
NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -16,7 +16,7 @@ CVE-2019-18843
CVE-2019-18842
RESERVED
CVE-2019-18841 (Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem
before ...)
- TODO: check
+ NOT-FOR-US: Chartkick.js
CVE-2019-18840 (In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity
checks of me ...)
- wolfssl 4.2.0+dfsg-3
NOTE: https://github.com/wolfSSL/wolfssl/issues/2555
@@ -28,7 +28,7 @@ CVE-2019-18838
CVE-2019-18837
RESERVED
CVE-2019-18836 (Envoy before 1.12.1 allows a remote denial of service because
of resou ...)
- TODO: check
+ NOT-FOR-US: envoy proxy (not the same as itp'ed envoy, #758651)
CVE-2019-18835 (Matrix Synapse before 1.5.0 mishandles signature checking on
some fede ...)
- matrix-synapse 1.5.0-1 (bug #944355)
NOTE: https://github.com/matrix-org/synapse/pull/6262
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/ddfc00ce6455c8f5adb0626e3faf96850d53d748
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/ddfc00ce6455c8f5adb0626e3faf96850d53d748
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
