Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
28d182f6 by Salvatore Bonaccorso at 2019-12-22T19:41:27Z
Add CVE-2019-19920/sa-exim
- - - - -
a0978ba4 by Salvatore Bonaccorso at 2019-12-22T19:47:23Z
Add Debian bug reference for CVE-2019-19920/sa-exim
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -85087,6 +85087,16 @@ CVE-2018-1000183 (A exposure of sensitive information
vulnerability exists in Je
NOT-FOR-US: Jenkins plugin
CVE-2018-1000182 (A server-side request forgery vulnerability exists in
Jenkins Git Plug ...)
NOT-FOR-US: Jenkins plugin
+CVE-2019-19920
+ - sa-exim <unfixed> (bug #947198)
+ [buster] - sa-exim <no-dsa> (Minor issue; can be fixed via point
release)
+ [stretch] - sa-exim <no-dsa> (Minor issue; can be fixed via point
release)
+ NOTE: https://bugs.debian.org/946829#24
+ NOTE: https://marc.info/?l=spamassassin-users&m=157668107325768&w=2
+ NOTE: https://marc.info/?l=spamassassin-users&m=157668305026635&w=2
+ NOTE: The issue is "effectively" mitigating due to the CVE-2018-11805
fix in
+ NOTE: spamassassin, making the Greylisting.pm non-functional (and so a
functional
+ NOTE: regression as well as tracked in #946829)
CVE-2018-11805 (In Apache SpamAssassin before 3.4.3, nefarious CF files can be
configu ...)
{DSA-4584-1 DLA-2037-1}
- spamassassin 3.4.3~rc6-1 (bug #946652)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/608c1e324e9949553b9d6ef57302fbbc89b21b4b...a0978ba4edfea846f64a7182e7149ec26a84b508
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/608c1e324e9949553b9d6ef57302fbbc89b21b4b...a0978ba4edfea846f64a7182e7149ec26a84b508
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
