Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9f457b81 by Salvatore Bonaccorso at 2018-04-09T08:19:02+02:00
Add CVE-2018-1000164/gunicorn
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -35,6 +35,11 @@ CVE-2018-9840
RESERVED
CVE-2018-9839
RESERVED
+CVE-2018-1000164 [Improper neutralization of CRLF Sequences
http/wsgi.py:process_headers() can allow an attacker to cause a server to
return arbitrary HTTP headers]
+ - gunicorn 19.5.0-1
+ NOTE:
https://epadillas.github.io/2018/04/02/http-header-splitting-in-gunicorn-19.4.5
+ NOTE: https://github.com/benoitc/gunicorn/issues/1227
+ NOTE:
https://github.com/benoitc/gunicorn/commit/5263a4ef2a63c62216680876f3813959839608ff
CVE-2018-1000161 [directory traversal in the way the non-default http-fetch
script sanitized URLs]
- nmap 7.70+dfsg1-1
CVE-2018-1000157
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/9f457b81204a4b754ccd4f22c725de9fdf8af807
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/9f457b81204a4b754ccd4f22c725de9fdf8af807
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
