[Git][security-tracker-team/security-tracker][master] automatic update

Salvatore Bonaccorso carnil at debian.org
Sun Apr 19 21:10:31 BST 2020



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e79ce484 by security tracker role at 2020-04-19T20:10:23+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,55 @@
+CVE-2020-11914
+	RESERVED
+CVE-2020-11913
+	RESERVED
+CVE-2020-11912
+	RESERVED
+CVE-2020-11911
+	RESERVED
+CVE-2020-11910
+	RESERVED
+CVE-2020-11909
+	RESERVED
+CVE-2020-11908
+	RESERVED
+CVE-2020-11907
+	RESERVED
+CVE-2020-11906
+	RESERVED
+CVE-2020-11905
+	RESERVED
+CVE-2020-11904
+	RESERVED
+CVE-2020-11903
+	RESERVED
+CVE-2020-11902
+	RESERVED
+CVE-2020-11901
+	RESERVED
+CVE-2020-11900
+	RESERVED
+CVE-2020-11899
+	RESERVED
+CVE-2020-11898
+	RESERVED
+CVE-2020-11897
+	RESERVED
+CVE-2020-11896
+	RESERVED
+CVE-2020-11895 (Ming (aka libming) 0.4.8 has a heap-based buffer over-read (2 bytes) i ...)
+	TODO: check
+CVE-2020-11894 (Ming (aka libming) 0.4.8 has a heap-based buffer over-read (8 bytes) i ...)
+	TODO: check
+CVE-2020-11893
+	RESERVED
+CVE-2020-11892
+	RESERVED
+CVE-2020-11891
+	RESERVED
+CVE-2020-11890
+	RESERVED
+CVE-2020-11889
+	RESERVED
 CVE-2020-11888
 	RESERVED
 CVE-2020-11887 (svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an  ...)
@@ -25181,6 +25233,7 @@ CVE-2020-1959
 CVE-2020-1958 (When LDAP authentication is enabled in Apache Druid 0.17.0, callers of ...)
 	- druid <itp> (bug #825797)
 CVE-2020-1957 (Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic ...)
+	{DLA-2181-1}
 	- shiro <unfixed> (bug #955018)
 	NOTE: https://www.openwall.com/lists/oss-security/2020/03/23/2
 	NOTE: Fixed by: https://github.com/apache/shiro/commit/3708d7907016bf2fa12691dff6ff0def1249b8ce#diff-98f7bc5c0391389e56531f8b3754081aL139



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e79ce484f73502ebe528f92f64fe678d7dcb3ab8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e79ce484f73502ebe528f92f64fe678d7dcb3ab8
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200419/1f58334b/attachment.html>


More information about the debian-security-tracker-commits mailing list