[Git][security-tracker-team/security-tracker][master] Add CVE-2019-1238{5,6}/ampache
Salvatore Bonaccorso
carnil at debian.org
Thu Aug 22 21:39:26 BST 2019
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
1e089f2b by Salvatore Bonaccorso at 2019-08-22T20:38:27Z
Add CVE-2019-1238{5,6}/ampache
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9462,9 +9462,9 @@ CVE-2019-12387 (In Twisted before 19.2.1, twisted.web did not validate or saniti
[jessie] - twisted <no-dsa> (Minor issue)
NOTE: https://github.com/twisted/twisted/commit/6c61fc4503ae39ab8ecee52d10f10ee2c371d7e2
CVE-2019-12386 (An issue was discovered in Ampache through 3.9.1. A stored XSS exists ...)
- TODO: check
+ - ampache <removed>
CVE-2019-12385 (An issue was discovered in Ampache through 3.9.1. The search engine is ...)
- TODO: check
+ - ampache <removed>
CVE-2019-12384 (FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to ...)
{DLA-1831-1}
- jackson-databind 2.9.8-3 (bug #930750)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1e089f2bf3fcefd67759aea82c2adf6333d0278c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1e089f2bf3fcefd67759aea82c2adf6333d0278c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190822/1f2980ba/attachment.html>
More information about the debian-security-tracker-commits
mailing list