Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6b81486d by Salvatore Bonaccorso at 2020-01-11T13:52:22+01:00
Add CVE-2020-68{38,39,40}/mruby, futher checks pending
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -13,10 +13,21 @@ CVE-2020-6842
CVE-2020-6841
RESERVED
CVE-2020-6840 (In mruby 2.1.0, there is a use-after-free in hash_slice in
mrbgems/mru ...)
+ - mruby <undetermined>
+ NOTE: https://github.com/mruby/mruby/issues/4927
+ NOTE:
https://github.com/mruby/mruby/commit/fc8fb41451b07b3fda0726ba80e88e509ad02452
TODO: check
CVE-2020-6839 (In mruby 2.1.0, there is a stack-based buffer overflow in
mrb_str_len_ ...)
+ - murby <undetermined>
+ NOTE: https://github.com/mruby/mruby/issues/4929
+ NOTE:
https://github.com/mruby/mruby/commit/2124b9b4c95e66e63b1eb26a8dab49753b82fd6c
TODO: check
CVE-2020-6838 (In mruby 2.1.0, there is a use-after-free in hash_values_at in
mrbgems ...)
+ - mruby <undetermined>
+ NOTE: https://github.com/mruby/mruby/issues/4926
+ NOTE:
https://github.com/mruby/mruby/commit/fc8fb41451b07b3fda0726ba80e88e509ad02452
+ NOTE:
https://github.com/mruby/mruby/commit/70e574689664c10ed2c47581999cc2ce3e3c5afb
+ NOTE:
https://github.com/mruby/mruby/commit/2742ded32fe18f88833d76b297f5c2170b6880c3
TODO: check
CVE-2020-6837
RESERVED
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/6b81486db41168ea5c404bc0308bdab7c12c81fa
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/6b81486db41168ea5c404bc0308bdab7c12c81fa
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
