Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
dbad1f6c by Salvatore Bonaccorso at 2020-02-26T18:30:14+01:00
Add upstream commits for CVE-2020-5243/uap-core
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9293,6 +9293,10 @@ CVE-2020-5244 (In BuddyPress before 5.1.2, requests to a
certain REST API endpoi
CVE-2020-5243 (uap-core before 0.7.3 is vulnerable to a denial of service
attack when ...)
- uap-core <unfixed>
NOTE:
https://github.com/ua-parser/uap-core/security/advisories/GHSA-cmcx-xhr8-3w9p
+ NOTE:
https://github.com/ua-parser/uap-core/commit/a679b131697e7371f0441f4799940779efa2f27e
+ NOTE:
https://github.com/ua-parser/uap-core/commit/dd279cff09546dbd4174bd05d29c0e90c2cffa7c
+ NOTE:
https://github.com/ua-parser/uap-core/commit/7d92a383440c9742ec878273c90a4dcf8446f9af
+ NOTE:
https://github.com/ua-parser/uap-core/commit/e9a1c74dae9ecd4aa6385bd34ef6c7243f89b537
CVE-2020-5242 (openHAB before 2.5.2 allow a remote attacker to use REST calls
to inst ...)
NOT-FOR-US: openHAB
CVE-2020-5241 (matestack-ui-core (RubyGem) before 0.7.4 is vulnerable to
XSS/Script i ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dbad1f6c02d2cabc777242537ce02d180bd7e45d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dbad1f6c02d2cabc777242537ce02d180bd7e45d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
