Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker
Commits:
549a8efc by Chris Lamb at 2020-05-09T13:13:35+01:00
Mark CVE-2020-12690, CVE-2020-12691 & CVE-2020-12690 as unspported in
jessie LTS.
- - - - -
4460f34e by Chris Lamb at 2020-05-09T13:20:36+01:00
Add a drive-thru comment regarding CVE-2020-12741 in src:tcpreplay.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -29,6 +29,7 @@ CVE-2020-12741
CVE-2020-12740 (tcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer
over-rea ...)
- tcpreplay <unfixed>
NOTE: https://github.com/appneta/tcpreplay/issues/576
+ NOTE: --fuzz-seed in PoC not present until version 4.2.0
CVE-2020-12739
RESERVED
CVE-2020-12738
@@ -154,16 +155,19 @@ CVE-2020-12675
CVE-2020-12692 (An issue was discovered in OpenStack Keystone before 15.0.1,
and 16.0. ...)
{DSA-4679-1}
- keystone 2:17.0.0~rc2-1 (bug #959900)
+ [jessie] - keystone <end-of-life> (Not supported in Jessie LTS)
NOTE: https://bugs.launchpad.net/keystone/+bug/1872737
NOTE: https://www.openwall.com/lists/oss-security/2020/05/06/4
CVE-2020-12691 (An issue was discovered in OpenStack Keystone before 15.0.1,
and 16.0. ...)
{DSA-4679-1}
- keystone 2:17.0.0~rc2-1 (bug #959900)
+ [jessie] - keystone <end-of-life> (Not supported in Jessie LTS)
NOTE: https://bugs.launchpad.net/keystone/+bug/1872733
NOTE: https://www.openwall.com/lists/oss-security/2020/05/06/5
CVE-2020-12690 (An issue was discovered in OpenStack Keystone before 15.0.1,
and 16.0. ...)
{DSA-4679-1}
- keystone 2:17.0.0~rc2-1 (bug #959900)
+ [jessie] - keystone <end-of-life> (Not supported in Jessie LTS)
NOTE: https://bugs.launchpad.net/keystone/+bug/1873290
NOTE: https://www.openwall.com/lists/oss-security/2020/05/06/6
CVE-2020-12674
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/1d3f1486ddeedf37f68d9eb354524461f0327e87...4460f34e8e33f8ff2e15e8f896e4b31d7d53e7f5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/1d3f1486ddeedf37f68d9eb354524461f0327e87...4460f34e8e33f8ff2e15e8f896e4b31d7d53e7f5
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
