Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e289aef7 by Salvatore Bonaccorso at 2020-04-01T08:35:31+02:00
Add CVE-2019-11939/thrift
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -50107,7 +50107,8 @@ CVE-2019-11941 (A remote code execution vulnerability
was identified in HPE Inte
CVE-2019-11940 (In the course of decompressing HPACK inside the HTTP2
protocol, an une ...)
NOT-FOR-US: Facebook Proxygen
CVE-2019-11939 (Golang Facebook Thrift servers would not error upon receiving
messages ...)
- TODO: check
+ - thrift <unfixed>
+ NOTE:
https://github.com/facebook/fbthrift/commit/483ed864d69f307e9e3b9dadec048216100c0757
CVE-2019-11938 (Java Facebook Thrift servers would not error upon receiving
messages d ...)
TODO: check
CVE-2019-11937 (In Mcrouter prior to v0.41.0, a large struct input provided to
the Car ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e289aef7ea645def99b65fd5b481455e8871d853
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e289aef7ea645def99b65fd5b481455e8871d853
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
