Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e79ce484 by security tracker role at 2020-04-19T20:10:23+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,55 @@
+CVE-2020-11914
+ RESERVED
+CVE-2020-11913
+ RESERVED
+CVE-2020-11912
+ RESERVED
+CVE-2020-11911
+ RESERVED
+CVE-2020-11910
+ RESERVED
+CVE-2020-11909
+ RESERVED
+CVE-2020-11908
+ RESERVED
+CVE-2020-11907
+ RESERVED
+CVE-2020-11906
+ RESERVED
+CVE-2020-11905
+ RESERVED
+CVE-2020-11904
+ RESERVED
+CVE-2020-11903
+ RESERVED
+CVE-2020-11902
+ RESERVED
+CVE-2020-11901
+ RESERVED
+CVE-2020-11900
+ RESERVED
+CVE-2020-11899
+ RESERVED
+CVE-2020-11898
+ RESERVED
+CVE-2020-11897
+ RESERVED
+CVE-2020-11896
+ RESERVED
+CVE-2020-11895 (Ming (aka libming) 0.4.8 has a heap-based buffer over-read (2
bytes) i ...)
+ TODO: check
+CVE-2020-11894 (Ming (aka libming) 0.4.8 has a heap-based buffer over-read (8
bytes) i ...)
+ TODO: check
+CVE-2020-11893
+ RESERVED
+CVE-2020-11892
+ RESERVED
+CVE-2020-11891
+ RESERVED
+CVE-2020-11890
+ RESERVED
+CVE-2020-11889
+ RESERVED
CVE-2020-11888
RESERVED
CVE-2020-11887 (svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript
inside an ...)
@@ -25181,6 +25233,7 @@ CVE-2020-1959
CVE-2020-1958 (When LDAP authentication is enabled in Apache Druid 0.17.0,
callers of ...)
- druid <itp> (bug #825797)
CVE-2020-1957 (Apache Shiro before 1.5.2, when using Apache Shiro with Spring
dynamic ...)
+ {DLA-2181-1}
- shiro <unfixed> (bug #955018)
NOTE: https://www.openwall.com/lists/oss-security/2020/03/23/2
NOTE: Fixed by:
https://github.com/apache/shiro/commit/3708d7907016bf2fa12691dff6ff0def1249b8ce#diff-98f7bc5c0391389e56531f8b3754081aL139
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e79ce484f73502ebe528f92f64fe678d7dcb3ab8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e79ce484f73502ebe528f92f64fe678d7dcb3ab8
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
