Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6cbfca75 by Salvatore Bonaccorso at 2021-12-02T21:42:38+01:00
Track fixes for sphinxsearch via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -69267,8 +69267,10 @@ CVE-2020-29052
RESERVED
CVE-2020-29051
RESERVED
-CVE-2020-29050
+CVE-2020-29050 [arbitrary file reads by scattered file snippets]
RESERVED
+ - sphinxsearch 2.2.11-3
+ NOTE: Backported for sphinxsearch from:
https://github.com/manticoresoftware/manticoresearch/commit/66b5761ad258c60b1866a8e1333f86e74f48035
CVE-2015-9551 (An issue was discovered on TOTOLINK A850R-V1 through
1.0.1-B20150707.1 ...)
NOT-FOR-US: TOTOLINK
CVE-2015-9550 (An issue was discovered on TOTOLINK A850R-V1 through
1.0.1-B20150707.1 ...)
@@ -159811,7 +159813,7 @@ CVE-2019-14513 (Improper bounds checking in Dnsmasq
before 2.76 allows an attack
CVE-2019-14512 (LimeSurvey 3.17.7+190627 has XSS via Boxes in
application/extensions/P ...)
- limesurvey <itp> (bug #472802)
CVE-2019-14511 (Sphinx Technologies Sphinx 3.1.1 by default has no
authentication and ...)
- - sphinxsearch <unfixed> (unimportant; bug #939762)
+ - sphinxsearch 2.2.11-4 (unimportant; bug #939762)
NOTE: Issue is just with the default configuration, but can be easily
reconfigured
NOTE: to listen on localhost only. sphinxsearch will not be started
automatically
NOTE: and an admin needs first to create anyway a
/etc/sphinxsearch/sphinx.conf
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6cbfca752eb69bb04cae84e0f2591aaf22381f56
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6cbfca752eb69bb04cae84e0f2591aaf22381f56
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
