Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits: d6071083 by Moritz Muehlenhoff at 2020-07-24T18:13:56+02:00 buster triage - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1348,7 +1348,8 @@ CVE-2020-15355 CVE-2020-15354 REJECTED CVE-2013-7489 (The Beaker library through 1.11.0 for Python is affected by deserializ ...) - - beaker <unfixed> + - beaker <unfixed> (bug #966197) + [buster] - beaker <no-dsa> (Minor issue) NOTE: https://github.com/bbangert/beaker/issues/191 NOTE: https://www.openwall.com/lists/oss-security/2020/05/14/11 CVE-2020-15353 @@ -27323,15 +27324,13 @@ CVE-2020-5400 (Cloud Foundry Cloud Controller (CAPI), versions prior to 1.91.0, CVE-2020-5399 (Cloud Foundry CredHub, versions prior to 2.5.10, connects to a MySQL d ...) NOT-FOR-US: Cloud Foundry CredHub CVE-2020-5398 (In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x pri ...) - - libspring-java <unfixed> - [jessie] - libspring-java <not-affected> (Vulnerable code not present) + - libspring-java <not-affected> (Vulnerable code not present) NOTE: https://pivotal.io/security/cve-2020-5398 NOTE: https://github.com/spring-projects/spring-framework/issues/24220 NOTE: https://github.com/spring-projects/spring-framework/commit/41f40c6c229d3b4f768718f1ec229d8f0ad76d76 NOTE: https://github.com/spring-projects/spring-framework/commit/956ffe68587c8d5f21135b5ce4650af0c2dea933 CVE-2020-5397 (Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF ...) - - libspring-java <unfixed> - [jessie] - libspring-java <not-affected> (Vulnerable code not present) + - libspring-java <not-affected> (Only affects 5.2.x) NOTE: https://pivotal.io/security/cve-2020-5397 NOTE: https://github.com/spring-projects/spring-framework/issues/24327 NOTE: https://github.com/spring-projects/spring-framework/commit/bc7d01048579430b4b2df668178809b63d3f1929 @@ -38043,7 +38042,8 @@ CVE-2020-1724 (A flaw was found in Keycloak in versions before 9.0.2. This flaw CVE-2020-1723 RESERVED CVE-2020-1722 (A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending ...) - - freeipa <unfixed> + - freeipa <unfixed> (bug #966200) + [buster] - freeipa <no-dsa> (Minor issue) NOTE: https://pagure.io/freeipa/issue/8268 NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1793071 CVE-2020-1721 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d607108391ebef48a884a7c7c351c83a1869f23b -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d607108391ebef48a884a7c7c351c83a1869f23b You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits