[Git][security-tracker-team/security-tracker][master] Add more details for CVE-2019-5885

Andrej Shadura andrewsh at debian.org
Tue Jan 15 13:41:09 GMT 2019


Andrej Shadura pushed to branch master at Debian Security Tracker / security-tracker


Commits:
435887b1 by Andrej Shadura at 2019-01-15T13:40:41Z
Add more details for CVE-2019-5885

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -910,6 +910,7 @@ CVE-2019-5885 [Synapse: Blindly trusts macaroon_secret_key in the config, which
 	RESERVED
 	- matrix-synapse 0.34.1.1-1
 	NOTE: https://matrix.org/blog/2019/01/10/critical-security-update-synapse-0-34-0-1-synapse-0-34-1-1/
+	NOTE: https://matrix.org/blog/2019/01/15/further-details-on-critical-security-update-in-synapse-affecting-all-versions-prior-to-0-34-1-cve-2019-5885/
 CVE-2019-5884 (php/elFinder.class.php in elFinder before 2.1.45 leaks information if ...)
 	NOT-FOR-US: elFinder
 CVE-2019-5883



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/435887b19c661db901f80f4eeaaf443feeddc673

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/435887b19c661db901f80f4eeaaf443feeddc673
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190115/84a709d1/attachment.html>


More information about the debian-security-tracker-commits mailing list