[Git][security-tracker-team/security-tracker][master] Track two new freeipa issues

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f0a195bb by Salvatore Bonaccorso at 2019-11-26T20:56:22Z
Track two new freeipa issues

Unfortunately the respective Red Hat Bugzilla entries are kept private
at

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14867

and

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10195

but for the fixed version via unstable trusting here the maintainer to
have got it right.

Thus start tracking those two new CVEs and search for details.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -15010,6 +15010,7 @@ CVE-2019-14868
 	RESERVED
 CVE-2019-14867
 	RESERVED
+	- freeipa 4.8.3-1
 CVE-2019-14866 [improper input validation when writing tar header fields leads to unexpect tar generation]
 	RESERVED
 	{DLA-1981-1}
@@ -29326,6 +29327,7 @@ CVE-2019-10196
 	NOT-FOR-US: nodejs-http-proxy-agent
 CVE-2019-10195
 	RESERVED
+	- freeipa 4.8.3-1
 CVE-2019-10194 (Sensitive passwords used in deployment and configuration of oVirt Metr ...)
 	NOT-FOR-US: ovirt-engine-metrics
 CVE-2019-10193 (A stack-buffer overflow vulnerability was found in the Redis hyperlogl ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f0a195bb7425c80a29a7044db3feaf485a9959d1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f0a195bb7425c80a29a7044db3feaf485a9959d1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191126/a6a4c982/attachment.html>