[Git][security-tracker-team/security-tracker][master] Add CVE-2020-12063 and mark it as unimportant (as non-issue)

Salvatore Bonaccorso carnil at debian.org
Fri Apr 24 20:34:18 BST 2020



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d3f506bc by Salvatore Bonaccorso at 2020-04-24T21:33:49+02:00
Add CVE-2020-12063 and mark it as unimportant (as non-issue)

Note that the issue is argued to not be possible to be considered a
postfix vulnerability as the mentioned issue is outside of the desgign
goals for Postfix.

Still reference the thread which contains various viewpoints on the
reported issue.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -160,6 +160,10 @@ CVE-2020-12064
 	RESERVED
 CVE-2020-12063
 	RESERVED
+	- postfix <unfixed> (unimportant)
+	NOTE: https://www.openwall.com/lists/oss-security/2020/04/23/3
+	NOTE: https://www.openwall.com/lists/oss-security/2020/04/23/12
+	NOTE: Not considered a Postfix vulnerability and scope is outside of the design goals
 CVE-2020-12062
 	RESERVED
 CVE-2020-12061



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d3f506bc4d3f21bc85728a1d8c48688352e4bb02

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d3f506bc4d3f21bc85728a1d8c48688352e4bb02
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200424/533e18bf/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list