[Git][security-tracker-team/security-tracker][master] Add CVE-2019-125{19,21}/squid

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3442b2c7 by Salvatore Bonaccorso at 2020-04-23T20:30:06+02:00
Add CVE-2019-125{19,21}/squid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -51592,14 +51592,20 @@ CVE-2019-12523 (An issue was discovered in Squid before 4.9. When handling a URN
 CVE-2019-12522 (An issue was discovered in Squid through 4.7. When Squid is run as roo ...)
 	TODO: check
 CVE-2019-12521 (An issue was discovered in Squid through 4.7. When Squid is parsing ES ...)
-	TODO: check
+	- squid <unfixed>
+	- squid3 <removed>
+	NOTE: http://www.squid-cache.org/Advisories/SQUID-2019_12.txt
+	NOTE: Squid 4: http://www.squid-cache.org/Versions/v4/changesets/squid-4-fdd4123629320aa1ee4c3481bb392437c90d188d.patch
 CVE-2019-12520 (An issue was discovered in Squid through 4.7 and 5. When receiving a r ...)
 	- squid 4.8-1
 	- squid3 <removed>
 	NOTE: http://www.squid-cache.org/Advisories/SQUID-2019_4.txt
 	NOTE: http://www.squid-cache.org/Versions/v4/changesets/SQUID-2019_4.patch
 CVE-2019-12519 (An issue was discovered in Squid through 4.7. When handling the tag es ...)
-	TODO: check
+	- squid <unfixed>
+	- squid3 <removed>
+	NOTE: http://www.squid-cache.org/Advisories/SQUID-2019_12.txt
+	NOTE: Squid 4: http://www.squid-cache.org/Versions/v4/changesets/squid-4-fdd4123629320aa1ee4c3481bb392437c90d188d.patch
 CVE-2017-18376 (An improper authorization check in the User API in TheHive before 2.13 ...)
 	NOT-FOR-US: User API in TheHive Project
 CVE-2019-12518 (Anviz CrossChex access control management software 4.3.8.0 and 4.3.12  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3442b2c7c1436f44405ee91189b24f553da82b55

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3442b2c7c1436f44405ee91189b24f553da82b55
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200423/a45fbd61/attachment.html>