Tobias Frost pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9bac5d7f by Tobias Frost at 2023-05-13T10:45:09+02:00
CVE-2020-13434 (sqlite) does not affect buster.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -226219,10 +226219,10 @@ CVE-2020-13434 (SQLite through 3.32.0 has an
integer overflow in sqlite3_str_vap
- sqlite3 3.32.1-1
[buster] - sqlite3 3.27.2-3+deb10u1
- sqlite <removed>
+ [buster] - sqlite <not-affected> (Vulnerable code introduced later)
NOTE: https://www.sqlite.org/src/info/23439ea582241138
NOTE: https://www.sqlite.org/src/info/d08d3405878d394e
NOTE:
https://github.com/sqlite/sqlite/commit/dd6c33d372f3b83f4fe57904c2bd5ebba5c38018
- NOTE: Vulnerable code in printf:vxprinf() for sqlite(v2)
CVE-2020-13433 (Jason2605 AdminPanel 4.0 allows SQL Injection via the
editPlayer.php h ...)
NOT-FOR-US: Jason2605 AdminPanel
CVE-2020-13432 (rejetto HFS (aka HTTP File Server) v2.3m Build #300, when
virtual file ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9bac5d7f168f5ca37e98ff03d7242897f68a9f6a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9bac5d7f168f5ca37e98ff03d7242897f68a9f6a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
