Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
60dac1d2 by Salvatore Bonaccorso at 2020-11-02T16:04:47+01:00
Add commit references for tmux issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,8 +1,10 @@
CVE-2020-XXXX [tmux buffer overflow in CSI parsing]
- tmux 3.1c-1
- [buster] - tmux <not-affected> (Only affects 3.x)
- [stretch] - tmux <not-affected> (Only affects 3.x)
+ [buster] - tmux <not-affected> (Vulnerable code introduced later)
+ [stretch] - tmux <not-affected> (Vulnerable code introduced later)
NOTE: https://www.openbsd.org/errata68.html (003: SECURITY FIX: October
29, 2020)
+ NOTE: Introduced by:
https://github.com/tmux/tmux/commit/4e3d6612845e190a490f40cce79c858dadaee74b
(2.9)
+ NOTE: Fixed by:
https://github.com/tmux/tmux/commit/a868bacb46e3c900530bed47a1c6f85b0fbe701c
CVE-2020-28046 (An issue was discovered in ProlinOS through 2.4.161.8859R. An
attacker ...)
NOT-FOR-US: ProlinOS
CVE-2020-28045 (An unsigned-library issue was discovered in ProlinOS through
2.4.161.8 ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60dac1d2a6700e82954e6b731fc6b86eff035cbe
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/60dac1d2a6700e82954e6b731fc6b86eff035cbe
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
