[Git][security-tracker-team/security-tracker][master] Update information on CVE-2020-12059/ceph

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ff4363ed by Salvatore Bonaccorso at 2020-04-24T14:58:42+02:00
Update information on CVE-2020-12059/ceph

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -168,8 +168,11 @@ CVE-2020-12060
 	RESERVED
 CVE-2020-12059 (An issue was discovered in Ceph through 13.2.9. A POST request with an ...)
 	- ceph 14.2.4-1
+	[stretch] - ceph <not-affected> (Vulnerable code introduced later)
+	[jessie] - ceph <not-affected> (Vulnerable code introduced later)
 	NOTE: https://tracker.ceph.com/issues/44967
-	NOTE: https://github.com/ceph/ceph/commit/375d926a4f2720a29b079c216bafb884eef985c3
+	NOTE: Introduced with: https://github.com/ceph/ceph/commit/5fb068114bb3da2f8fabea89160a8453f861dc96 (v12.1.1)
+	NOTE: Fixed by: https://github.com/ceph/ceph/commit/375d926a4f2720a29b079c216bafb884eef985c3 (v13.2.10)
 	NOTE: Consider 14.x series as fixed due to the use of the new style xml parsing.
 CVE-2019-20787 (Teeworlds before 0.7.4 has an integer overflow when computing a tilema ...)
 	- teeworlds <unfixed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff4363edc37348d6e6ff6bade28fd5009fb77da0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ff4363edc37348d6e6ff6bade28fd5009fb77da0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200424/d6a006ef/attachment.html>