Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f0aab8b9 by Salvatore Bonaccorso at 2021-02-16T21:07:25+01:00
Mark CVE-2020-29600 and CVE-2020-35176 as no-dsa
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -18388,6 +18388,7 @@ CVE-2020-35177 (HashiCorp Vault and Vault Enterprise
1.4.1 and newer allowed the
CVE-2020-35176 (In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a
partial a ...)
{DLA-2506-1}
- awstats 7.8-2 (bug #977190)
+ [buster] - awstats <no-dsa> (Minor issue; can be fixed via point
release)
NOTE: https://github.com/eldy/awstats/issues/195
NOTE:
https://github.com/eldy/AWStats/commit/96756d7f40e002cc1e6ba72c633fb66b92e54f49
CVE-2020-35175 (Frappe Framework 12 and 13 does not properly validate the HTTP
method ...)
@@ -20260,6 +20261,7 @@ CVE-2020-29601 (The official notary docker images
before signer-0.6.1-1 contain
CVE-2020-29600 (In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an
absolute ...)
{DLA-2506-1}
- awstats 7.8-1 (bug #891469)
+ [buster] - awstats <no-dsa> (Minor issue; can be fixed via point
release)
NOTE: https://github.com/eldy/awstats/issues/90
NOTE:
https://github.com/eldy/awstats/commit/d4d815d0caae3dbae83ac70a1ae4581bd57cf376
CVE-2020-29599 (ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40
mishandles the - ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f0aab8b9d40f8762e58afcf4e86f013f00fe7bfb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f0aab8b9d40f8762e58afcf4e86f013f00fe7bfb
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
