[Git][security-tracker-team/security-tracker][master] gosa, libextractor fixed

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
79f452e2 by Moritz Muehlenhoff at 2019-08-31T18:17:54Z
gosa, libextractor fixed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -811,7 +811,7 @@ CVE-2019-15532 (CyberChef before 8.31.2 allows XSS in core/operations/TextEncodi
 	TODO: check
 CVE-2019-15531 (GNU Libextractor through 1.9 has a heap-based buffer over-read in the  ...)
 	{DLA-1904-1}
-	- libextractor <unfixed> (bug #935553)
+	- libextractor 1:1.9-2 (bug #935553)
 	NOTE: https://bugs.gnunet.org/view.php?id=5846
 	NOTE: https://git.gnunet.org/libextractor.git/commit/?id=d2b032452241708bee68d02aa02092cfbfba951a
 CVE-2019-15530 (An issue was discovered on D-Link DIR-823G devices with firmware V1.0. ...)
@@ -3823,7 +3823,7 @@ CVE-2019-14467
 	RESERVED
 CVE-2019-14466 [GOsa <= 2.7.5.2 uses unserialize to restore filter settings from a cookie. Since this cookie is supplied by the client, authenticated users can pass arbitrary content to unserialized, which opens GOsa up to a potential PHP object injection.]
 	RESERVED
-	- gosa <unfixed>
+	- gosa 2.7.4+reloaded3-10
 	NOTE: https://github.com/gosa-project/gosa-core/commit/e1504e9765db2adde8b4685b5c93fbba57df868b (fix)
 	NOTE: https://github.com/gosa-project/gosa-core/commit/90b674960335d888c76ca5e99027df8e7fa66f3a (fixing the prev commit)
 	NOTE: https://github.com/gosa-project/gosa-core/pull/30#issuecomment-521975100



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/79f452e290fd63f57afaa2d37fd194d1de2c4f7d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/79f452e290fd63f57afaa2d37fd194d1de2c4f7d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190831/6ec265fe/attachment.html>