Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
dde954ff by security tracker role at 2020-08-15T20:10:21+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -17182,7 +17182,7 @@ CVE-2020-15863 (hw/net/xgmac.c in the XGMAC Ethernet
controller in QEMU before 0
NOTE:
https://git.qemu.org/?p=qemu.git;a=commit;h=5519724a13664b43e225ca05351c60b4468e4555
CVE-2020-15861 [Elevation of Privileges due to symlink handling]
RESERVED
- {DLA-2313-1}
+ {DSA-4746-1 DLA-2313-1}
- net-snmp 5.8+dfsg-5 (bug #966599)
NOTE: https://github.com/net-snmp/net-snmp/issues/145
NOTE:
https://github.com/net-snmp/net-snmp/commit/4fd9a450444a434a993bc72f7c3486ccce41f602
@@ -17282,7 +17282,7 @@ CVE-2020-15817 (In JetBrains YouTrack before
2020.1.1331, an external user could
NOT-FOR-US: JetBrains YouTrack
CVE-2020-15862 [privilege escalation]
RESERVED
- {DLA-2299-1}
+ {DSA-4746-1 DLA-2299-1}
- net-snmp 5.8+dfsg-4 (bug #965166)
NOTE: The commit
https://github.com/net-snmp/net-snmp/commit/c2b96ee744392243782094432f657ded4e985a07
NOTE: disables NET-SNMP-EXTEND-MIB support by default. But it is still
@@ -44488,6 +44488,7 @@ CVE-2020-5531 (Mitsubishi Electric MELSEC C Controller
Module and MELIPC Series
CVE-2020-5530 (Cross-site request forgery (CSRF) vulnerability in Easy
Property Listi ...)
NOT-FOR-US: Easy Property Listings plugin for WordPress
CVE-2020-5529 (HtmlUnit prior to 2.37.0 contains code execution
vulnerabilities. Html ...)
+ {DLA-2326-1}
- htmlunit <removed>
NOTE:
https://github.com/HtmlUnit/htmlunit/commit/934390fefcd2cd58e6d86f2bc19d811ae17bfa28
CVE-2020-5528 (Cross-site scripting vulnerability in Movable Type series
(Movable Typ ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dde954ffd1f3f6aca07e4f47409725bd39794486
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dde954ffd1f3f6aca07e4f47409725bd39794486
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
