[Git][security-tracker-team/security-tracker][master] Add Debian bug tracking items for CVE-2019-12420 and CVE-2018-11805

Salvatore Bonaccorso carnil at debian.org
Thu Dec 12 21:26:20 GMT 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c36530b1 by Salvatore Bonaccorso at 2019-12-12T21:24:25Z
Add Debian bug tracking items for CVE-2019-12420 and CVE-2018-11805

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -28498,7 +28498,7 @@ CVE-2019-12421 (When using an authentication mechanism other than PKI, when the
 	NOT-FOR-US: Apache NiFi
 CVE-2019-12420
 	RESERVED
-	- spamassassin 3.4.3~rc6-1
+	- spamassassin 3.4.3~rc6-1 (bug #946653)
 	NOTE: https://www.openwall.com/lists/oss-security/2019/12/12/2
 	NOTE: https://markmail.org/message/pyp425yrulfxyhrn
 	NOTE: https://svn.apache.org/r1866128
@@ -83973,7 +83973,7 @@ CVE-2018-1000182 (A server-side request forgery vulnerability exists in Jenkins
 	NOT-FOR-US: Jenkins plugin
 CVE-2018-11805
 	RESERVED
-	- spamassassin 3.4.3~rc6-1
+	- spamassassin 3.4.3~rc6-1 (bug #946652)
 	NOTE: https://www.openwall.com/lists/oss-security/2019/12/12/1
 	NOTE: https://markmail.org/message/pyp425yrulfxyhrn
 CVE-2018-11804 (Spark's Apache Maven-based build includes a convenience script, 'build ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/c36530b132bddcf0069dff2470f78a038fa9e22b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/c36530b132bddcf0069dff2470f78a038fa9e22b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191212/02dc8db5/attachment.html>


More information about the debian-security-tracker-commits mailing list