Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b3f77754 by Salvatore Bonaccorso at 2020-11-14T10:37:21+01:00
Add CVE-2020-2774{5,6}/slurm-llnl
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4724,10 +4724,18 @@ CVE-2020-27748
RESERVED
CVE-2020-27747 (An issue was discovered in Click Studios Passwordstate 8.9
(Build 8973 ...)
NOT-FOR-US: Click Studios Passwordstate
-CVE-2020-27746
- RESERVED
-CVE-2020-27745
- RESERVED
+CVE-2020-27746 [X11 forwarding - avoid unsafe use of magic cookie as arg to
xauth command]
+ RESERVED
+ - slurm-llnl <unfixed>
+ NOTE: https://www.schedmd.com/news.php?id=240
+ NOTE:
https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html
+ NOTE:
https://github.com/SchedMD/slurm/commit/07309deb45c33e735e191faf9dd31cca1054a15c
+CVE-2020-27745 [PMIx - fix potential buffer overflows from use of unpackmem()]
+ RESERVED
+ - slurm-llnl <unfixed>
+ NOTE: https://www.schedmd.com/news.php?id=240
+ NOTE:
https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html
+ NOTE:
https://github.com/SchedMD/slurm/commit/c3142dd87e06621ff148791c3d2f298b5c0b3a81
CVE-2020-27744 (An issue was discovered on Western Digital My Cloud NAS
devices before ...)
NOT-FOR-US: Western Digital My Cloud NAS devices
CVE-2020-27743 (libtac in pam_tacplus through 1.5.1 lacks a check for a
failure of RAN ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b3f7775498c44d7eb537299759cdbf44008261f8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b3f7775498c44d7eb537299759cdbf44008261f8
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
