Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e4dccef4 by Salvatore Bonaccorso at 2020-02-03T21:41:46+01:00
Update information on CVE-2019-12291/consul
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -41539,7 +41539,9 @@ CVE-2019-12293 (In Poppler through 0.76.1, there is a
heap-based buffer over-rea
CVE-2019-12292 (Citrix AppDNA before 7 1906.1.0.472 has Incorrect Access
Control. ...)
NOT-FOR-US: Citrix AppDNA
CVE-2019-12291 (HashiCorp Consul 1.4.0 through 1.5.0 has Incorrect Access
Control. Key ...)
- - consul <unfixed>
+ - consul 1.4.5+dfsg1-1
+ [buster] - consul <not-affected> (Vulnerable code introduced in 1.4.0)
+ NOTE: https://github.com/hashicorp/consul/issues/5888
CVE-2019-12290 (GNU libidn2 before 2.2.0 fails to perform the roundtrip checks
specifi ...)
- libidn2 2.2.0-1
[buster] - libidn2 <no-dsa> (Minor issue; intrusive to backport)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e4dccef45612150987f35dd01cd49d2285924bc2
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/e4dccef45612150987f35dd01cd49d2285924bc2
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
