Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
087d8cb6 by Salvatore Bonaccorso at 2020-07-26T15:01:28+02:00
Add information on CVE-2020-15889/lua
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -133,7 +133,14 @@ CVE-2020-15890 (LuaJit through 2.1.0-beta3 has an
out-of-bounds read because __g
- luajit <unfixed> (bug #966148)
NOTE: https://github.com/LuaJIT/LuaJIT/issues/601
CVE-2020-15889 (Lua through 5.4.0 has a getobjname heap-based buffer over-read
because ...)
- TODO: check
+ - lua5.4 5.4.0-2
+ - lua5.3 <undetermined>
+ - lua5.2 <undetermined>
+ - lua5.1 <undetermined>
+ - lua5.0 <undetermined>
+ NOTE: http://lua-users.org/lists/lua-l/2020-07/msg00078.html
+ NOTE:
https://github.com/lua/lua/commit/127e7a6c8942b362aa3c6627f44d660a4fb75312
+ TODO: check details for older versions
CVE-2020-15888 (Lua through 5.4.0 mishandles the interaction between stack
resizes and ...)
TODO: check
CVE-2020-15887 (A SQL injection vulnerability in softwareupdate_controller.php
in the ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/087d8cb6975ecb05978071adde234fb3f20fd367
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/087d8cb6975ecb05978071adde234fb3f20fd367
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
