[Git][security-tracker-team/security-tracker][master] 2 commits: Add CVE-2019-19920/sa-exim

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
28d182f6 by Salvatore Bonaccorso at 2019-12-22T19:41:27Z
Add CVE-2019-19920/sa-exim

- - - - -
a0978ba4 by Salvatore Bonaccorso at 2019-12-22T19:47:23Z
Add Debian bug reference for CVE-2019-19920/sa-exim

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -85087,6 +85087,16 @@ CVE-2018-1000183 (A exposure of sensitive information vulnerability exists in Je
 	NOT-FOR-US: Jenkins plugin
 CVE-2018-1000182 (A server-side request forgery vulnerability exists in Jenkins Git Plug ...)
 	NOT-FOR-US: Jenkins plugin
+CVE-2019-19920
+	- sa-exim <unfixed> (bug #947198)
+	[buster] - sa-exim <no-dsa> (Minor issue; can be fixed via point release)
+	[stretch] - sa-exim <no-dsa> (Minor issue; can be fixed via point release)
+	NOTE: https://bugs.debian.org/946829#24
+	NOTE: https://marc.info/?l=spamassassin-users&m=157668107325768&w=2
+	NOTE: https://marc.info/?l=spamassassin-users&m=157668305026635&w=2
+	NOTE: The issue is "effectively" mitigating due to the CVE-2018-11805 fix in
+	NOTE: spamassassin, making the Greylisting.pm non-functional (and so a functional
+	NOTE: regression as well as tracked in #946829)
 CVE-2018-11805 (In Apache SpamAssassin before 3.4.3, nefarious CF files can be configu ...)
 	{DSA-4584-1 DLA-2037-1}
 	- spamassassin 3.4.3~rc6-1 (bug #946652)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/608c1e324e9949553b9d6ef57302fbbc89b21b4b...a0978ba4edfea846f64a7182e7149ec26a84b508

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/608c1e324e9949553b9d6ef57302fbbc89b21b4b...a0978ba4edfea846f64a7182e7149ec26a84b508
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191222/fbad1119/attachment.html>