Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7856a5c9 by Salvatore Bonaccorso at 2020-09-18T14:35:39+02:00
Add reference for commit in libuv upstream referring to CVE-2020-8252
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -41171,6 +41171,7 @@ CVE-2020-8252 [fs.realpath.native on may cause buffer
overflow]
- libuv1 1.39.0-1
NOTE:
https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/#fs-realpath-native-on-may-cause-buffer-overflow-medium-cve-2020-8252
NOTE: Debian's version of nodejs uses the shared system library of
libuv1 instead of the bundled one
+ NOTE:
https://github.com/libuv/libuv/commit/0e6e8620496dff0eb285589ef1e37a7f407f3ddd
CVE-2020-8251 [Denial of Service by resource exhaustion CWE-400 due to
unfinished HTTP/1.1 requests]
RESERVED
- nodejs <not-affected> (Only affects 14.x series)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7856a5c98e8ba50193ab6f06ce27ae05e8d3e1c5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7856a5c98e8ba50193ab6f06ce27ae05e8d3e1c5
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
