Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
61967db0 by Salvatore Bonaccorso at 2021-01-15T22:33:57+01:00
Update references for CVE-2020-14343/pyyaml
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -52416,6 +52416,8 @@ CVE-2020-14343 [.load() and FullLoader still vulnerable
to fairly trivial RCE]
[buster] - pyyaml <not-affected> (Vulnerable code not present)
[stretch] - pyyaml <not-affected> (Vulnerable code not present)
NOTE: https://github.com/yaml/pyyaml/issues/420
+ NOTE: Fixed via: https://github.com/yaml/pyyaml/pull/472
+ NOTE:
https://github.com/yaml/pyyaml/commit/7adc0db3f613a82669f2b168edd98379b83adb3c
NOTE: CVE is for an incomplete fix of CVE-2020-1747.
CVE-2020-14342 (It was found that cifs-utils' mount.cifs was invoking a shell
when req ...)
- cifs-utils 2:6.11-1 (bug #970172)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/61967db0ab2056106bef03aac7339f5f77261b25
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/61967db0ab2056106bef03aac7339f5f77261b25
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
