Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0a0c38a8 by security tracker role at 2020-02-22T20:10:36+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1105,6 +1105,7 @@ CVE-2020-8839 (Stored XSS was discovered on CHIYU BF-430
232/485 TCP/IP Converte
NOT-FOR-US: CHIYU BF-430 232/485 TCP/IP Converter devices
CVE-2015-9542 [buffer overflow in password field]
RESERVED
+ {DLA-2116-1}
- libpam-radius-auth 1.4.0-3 (bug #951396)
NOTE: https://github.com/FreeRADIUS/pam_radius/commit/01173ec
NOTE: https://github.com/FreeRADIUS/pam_radius/commit/6bae92d
@@ -1641,7 +1642,7 @@ CVE-2020-8599
CVE-2020-8598
RESERVED
CVE-2020-8597 (eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname
buffer overf ...)
- {DLA-2097-1}
+ {DSA-4632-1 DLA-2097-1}
- lwip <unfixed> (bug #951291)
[experimental] - ppp 2.4.8-1+1~exp1
- ppp <unfixed> (bug #950618)
@@ -63153,12 +63154,13 @@ CVE-2019-5484 (Bower before 1.8.8 has a path
traversal vulnerability permitting
CVE-2019-5483 (Seneca < 3.9.0 contains a vulnerability that could lead to
exposing ...)
NOT-FOR-US: Seneca
CVE-2019-5482 (Heap buffer overflow in the TFTP protocol handler in cURL
7.19.4 to 7. ...)
- {DLA-1917-1}
+ {DSA-4633-1 DLA-1917-1}
- curl 7.66.0-1 (bug #940010)
NOTE: https://curl.haxx.se/docs/CVE-2019-5482.html
NOTE: Introduced by:
https://github.com/curl/curl/commit/0516ce7786e9500c2e447d48aa9b3f24a6ca70f9
NOTE: Fixed by:
https://github.com/curl/curl/commit/facb0e4662415b5f28163e853dc6742ac5fafb3d
(curl-7_66_0)
CVE-2019-5481 (Double-free vulnerability in the FTP-kerberos code in cURL
7.52.0 to 7 ...)
+ {DSA-4633-1}
- curl 7.66.0-1 (bug #940009)
[jessie] - curl <not-affected> (Vulnerable code introduced later)
NOTE: https://curl.haxx.se/docs/CVE-2019-5481.html
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0a0c38a807bbef047f839861acf3ac9e74162abb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0a0c38a807bbef047f839861acf3ac9e74162abb
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
