Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d2ced27a by Salvatore Bonaccorso at 2020-12-02T21:09:00+01:00
Reference partial mitigation for CVE-2020-14145
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -37004,6 +37004,7 @@ CVE-2020-14145 (The client side in OpenSSH 5.7 through
8.3 has an Observable Dis
NOTE: https://www.fzi.de/fileadmin/user_upload/2020-06-26-FSA-2020-2.pdf
NOTE: The OpenSSH project is not planning to change the behaviour of
OpenSSH regarding
NOTE: the issue, details in "3.1 OpenSSH" in the publication.
+ NOTE: Partial mitigation:
https://anongit.mindrot.org/openssh.git/commit/?id=b3855ff053f5078ec3d3c653cdaedefaa5fc362d
(V_8_4_P1)
CVE-2020-14144 (** DISPUTED ** The git hook feature in Gitea 1.1.0 through
1.12.5 migh ...)
- gitea <removed>
CVE-2020-14143
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d2ced27a29e7d0670f361c1d0b28b0c04b78d742
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d2ced27a29e7d0670f361c1d0b28b0c04b78d742
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
