Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
eceff5ec by Salvatore Bonaccorso at 2020-09-08T08:33:31+02:00
Add CVE-2020-14342/cifs-utils
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -23061,8 +23061,12 @@ CVE-2020-14343 [.load() and FullLoader still
vulnerable to fairly trivial RCE]
[stretch] - pyyaml <not-affected> (Vulnerable code not present)
NOTE: https://github.com/yaml/pyyaml/issues/420
NOTE: CVE is for an incomplete fix of CVE-2020-1747.
-CVE-2020-14342
+CVE-2020-14342 [shell command injection in mount.cifs]
RESERVED
+ - cifs-utils <unfixed>
+ [buster] - cifs-utils <no-dsa> (Minor issue)
+ NOTE:
https://lists.samba.org/archive/samba-technical/2020-September/135747.html
+ NOTE:
https://git.samba.org/cifs-utils.git/?p=cifs-utils.git;a=commit;h=48a654e2e763fce24c22e1b9c695b42804bbdd4a
CVE-2020-14341
RESERVED
CVE-2020-14340
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eceff5ecd69976f3472a4e68bcf1a610cb37b916
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eceff5ecd69976f3472a4e68bcf1a610cb37b916
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
