Markus Koschany pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
89c3a4a2 by Markus Koschany at 2020-10-09T22:37:41+02:00
CVE-2020-13956,httpcomponents-client: Link to fixing commit
- - - - -
d37e6137 by Markus Koschany at 2020-10-09T23:05:36+02:00
CVE-2020-13956,httpcomponents-client: Fixed in unstable.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -28097,8 +28097,9 @@ CVE-2020-13957
RESERVED
CVE-2020-13956 [incorrect handling of malformed authority component in request
URIs]
RESERVED
- - httpcomponents-client <unfixed>
+ - httpcomponents-client 4.5.13-1
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1886587
+ NOTE: Fixed by
https://github.com/apache/httpcomponents-client/commit/e628b4c5c464c2fa346385596cc78e035a91a62e
CVE-2020-13955 (HttpUtils#getURLConnection method disables explicitly hostname
verific ...)
TODO: check
CVE-2020-13954
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/4376346ec33e6e0738dd709e6c1936e02cae95fb...d37e6137343d8b892b526c3fe04780cb0869aaef
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/4376346ec33e6e0738dd709e6c1936e02cae95fb...d37e6137343d8b892b526c3fe04780cb0869aaef
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
