[Git][security-tracker-team/security-tracker][master] new etcd issues
Moritz Muehlenhoff
jmm at debian.org
Thu Aug 20 19:45:51 BST 2020
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
5f1a0026 by Moritz Muehlenhoff at 2020-08-20T20:45:28+02:00
new etcd issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -19383,13 +19383,13 @@ CVE-2020-15117 (In Synergy before version 1.12.0, a Synergy server can be crashe
CVE-2020-15116
RESERVED
CVE-2020-15115 (etcd before versions 3.3.23 and 3.4.10 does not perform any password l ...)
- TODO: check
+ - etcd <unfixed>
CVE-2020-15114 (In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simpl ...)
- TODO: check
+ - etcd <unfixed>
CVE-2020-15113 (In etcd before versions 3.3.23 and 3.4.10, certain directory paths are ...)
- TODO: check
+ - etcd <unfixed>
CVE-2020-15112 (In etcd before versions 3.3.23 and 3.4.10, it is possible to have an e ...)
- TODO: check
+ - etcd <unfixed>
CVE-2020-15111 (In Fiber before version 1.12.6, the filename that is given in c.Attach ...)
NOT-FOR-US: Fiber
CVE-2020-15110 (In jupyterhub-kubespawner before 0.12, certain usernames will be able ...)
@@ -19405,7 +19405,7 @@ CVE-2020-15108 (In glpi before 9.5.1, there is a SQL injection for all usages of
CVE-2020-15107 (In openenclave before 0.10.0, enclaves that use x87 FPU operations are ...)
NOT-FOR-US: openenclave
CVE-2020-15106 (In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic ...)
- TODO: check
+ - etcd <unfixed>
CVE-2020-15105 (Django Two-Factor Authentication before 1.12, stores the user's passwo ...)
NOT-FOR-US: Django Two-Factor Authentication
CVE-2020-15104 (In Envoy before versions 1.12.6, 1.13.4, 1.14.4, and 1.15.0 when valid ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5f1a002626303a2eb170d5709699025353eed743
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5f1a002626303a2eb170d5709699025353eed743
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200820/7e4eb444/attachment.html>
More information about the debian-security-tracker-commits
mailing list