[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
carnil at debian.org
Sat Aug 31 21:10:27 BST 2019
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
9f1d674e by security tracker role at 2019-08-31T20:10:18Z
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3823,6 +3823,7 @@ CVE-2019-14467
RESERVED
CVE-2019-14466 [GOsa <= 2.7.5.2 uses unserialize to restore filter settings from a cookie. Since this cookie is supplied by the client, authenticated users can pass arbitrary content to unserialized, which opens GOsa up to a potential PHP object injection.]
RESERVED
+ {DLA-1905-1}
- gosa 2.7.4+reloaded3-10
NOTE: https://github.com/gosa-project/gosa-core/commit/e1504e9765db2adde8b4685b5c93fbba57df868b (fix)
NOTE: https://github.com/gosa-project/gosa-core/commit/90b674960335d888c76ca5e99027df8e7fa66f3a (fixing the prev commit)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9f1d674e859fcc12103c74b7a7e256618ef58831
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9f1d674e859fcc12103c74b7a7e256618ef58831
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190831/637b2a4e/attachment.html>
More information about the debian-security-tracker-commits
mailing list