Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
aee8fd3f by Salvatore Bonaccorso at 2020-11-13T08:06:33+01:00
Update information for CVE-2020-2569{4,5,6}
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7942,18 +7942,30 @@ CVE-2020-25697
- libx11 <undetermined>
NOTE: https://www.openwall.com/lists/oss-security/2020/11/09/3
TODO: check correct packages to track
-CVE-2020-25696
+CVE-2020-25696 [psql's \gset allows overwriting specially treated variables]
RESERVED
- postgresql-13 13.1-1
- TODO: Reference news entries and older major versions affected
-CVE-2020-25695
+ - postgresql-12 <unfixed>
+ - postgresql-11 <removed>
+ [buster] - postgresql-11 <no-dsa> (Minor issue)
+ - postgresql-9.6 <removed>
+ NOTE:
https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/
+CVE-2020-25695 [Multiple features escape "security restricted operation"
sandbox]
RESERVED
- postgresql-13 13.1-1
- TODO: Reference news entries and older major versions affected
-CVE-2020-25694
+ - postgresql-12 <unfixed>
+ - postgresql-11 <removed>
+ [buster] - postgresql-11 <no-dsa> (Minor issue)
+ - postgresql-9.6 <removed>
+ NOTE:
https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/
+CVE-2020-25694 [Reconnection can downgrade connection security settings]
RESERVED
- postgresql-13 13.1-1
- TODO: Reference news entries and older major versions affected
+ - postgresql-12 <unfixed>
+ - postgresql-11 <removed>
+ [buster] - postgresql-11 <no-dsa> (Minor issue)
+ - postgresql-9.6 <removed>
+ NOTE:
https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/
CVE-2020-25693
RESERVED
- cimg <unfixed> (bug #973770)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aee8fd3f7353c95cb1d6fda3f04889f4b112cd54
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aee8fd3f7353c95cb1d6fda3f04889f4b112cd54
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
