Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker
Commits: 89c3a4a2 by Markus Koschany at 2020-10-09T22:37:41+02:00 CVE-2020-13956,httpcomponents-client: Link to fixing commit - - - - - d37e6137 by Markus Koschany at 2020-10-09T23:05:36+02:00 CVE-2020-13956,httpcomponents-client: Fixed in unstable. - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -28097,8 +28097,9 @@ CVE-2020-13957 RESERVED CVE-2020-13956 [incorrect handling of malformed authority component in request URIs] RESERVED - - httpcomponents-client <unfixed> + - httpcomponents-client 4.5.13-1 NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1886587 + NOTE: Fixed by https://github.com/apache/httpcomponents-client/commit/e628b4c5c464c2fa346385596cc78e035a91a62e CVE-2020-13955 (HttpUtils#getURLConnection method disables explicitly hostname verific ...) TODO: check CVE-2020-13954 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/4376346ec33e6e0738dd709e6c1936e02cae95fb...d37e6137343d8b892b526c3fe04780cb0869aaef -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/4376346ec33e6e0738dd709e6c1936e02cae95fb...d37e6137343d8b892b526c3fe04780cb0869aaef You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits