[Git][security-tracker-team/security-tracker][master] Add CVE-2019-12781/python-django

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5e44f0c2 by Salvatore Bonaccorso at 2019-07-01T14:09:24Z
Add CVE-2019-12781/python-django

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -828,8 +828,14 @@ CVE-2019-12783
 	RESERVED
 CVE-2019-12782
 	RESERVED
-CVE-2019-12781
-	RESERVED
+CVE-2019-12781 [Incorrect HTTP detection with reverse-proxy connecting via HTTPS]
+	RESERVED
+	- python-django <unfixed>
+	NOTE: https://www.djangoproject.com/weblog/2019/jul/01/security-releases/
+	NOTE: https://github.com/django/django/commit/54d0f5e62f54c29a12dd96f44bacd810cbe03ac8 (master)
+	NOTE: https://github.com/django/django/commit/77706a3e4766da5d5fb75c4db22a0a59a28e6cd6 (2.2)
+	NOTE: https://github.com/django/django/commit/1e40f427bb8d0fb37cc9f830096a97c36c97af6f (2.1)
+	NOTE: https://github.com/django/django/commit/32124fc41e75074141b05f10fc55a4f01ff7f050 (1.11)
 CVE-2019-12780 (The Belkin Wemo Enabled Crock-Pot allows command injection in the Wemo ...)
 	NOT-FOR-US: Belkin Wemo Enabled Crock-Pot
 CVE-2019-5439 (A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5e44f0c20c40802807d919146a65e15289090bd2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/5e44f0c20c40802807d919146a65e15289090bd2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190701/75b14a16/attachment.html>