Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fe802b5c by Salvatore Bonaccorso at 2021-01-15T21:44:58+01:00
Add CVE-2020-35733/erlang
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -8884,7 +8884,15 @@ CVE-2020-35735 (Vidyo 02-09-/D allows clickjacking via
the portal/ URI. ...)
CVE-2020-35734
RESERVED
CVE-2020-35733 (An issue was discovered in Erlang/OTP before 23.2.2. The ssl
applicati ...)
- TODO: check
+ - erlang <unfixed>
+ [buster] - erlang <not-affected> (Vulnerable code introduced later)
+ [stretch] - erlang <not-affected> (Vulnerable code introduced later)
+ NOTE:
https://erlang.org/pipermail/erlang-questions/2021-January/100357.html
+ NOTE: Introduced in:
https://github.com/erlang/otp/commit/d24a220c3b867caef83026ba31d2656366da4322
(OTP-23.2)
+ NOTE: Fixed by:
https://github.com/erlang/otp/commit/a59f3c4d2be19343f43c46241d0f4e30dd5563de
(OTP-23.2.2)
+ NOTE: Fixed by:
https://github.com/erlang/otp/commit/c515e8d74fb92430c619eaa2dd00c89d94c6770a
(OTP-23.2.2)
+ NOTE: Fixed by:
https://github.com/erlang/otp/commit/11a098cb0bcc30d7c424f01c60bfefd1deece287
(OTP-23.2.2)
+ NOTE: Fixed by:
https://github.com/erlang/otp/commit/95222bb877515345d6716f3bc36139ab52211af0
(OTP-23.2.2)
CVE-2020-35732
RESERVED
CVE-2020-35731
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe802b5c5d3b27ed2aee0cc5af9f15e390d0d921
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe802b5c5d3b27ed2aee0cc5af9f15e390d0d921
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits