[Git][security-tracker-team/security-tracker][master] Update information on CVE-2020-13124/sabnzbdplus

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d4a436ed by Salvatore Bonaccorso at 2020-08-24T07:50:42+02:00
Update information on CVE-2020-13124/sabnzbdplus

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -24738,7 +24738,11 @@ CVE-2020-13126 (An issue was discovered in the Elementor Pro plugin before 2.9.4
 CVE-2020-13125 (An issue was discovered in the "Ultimate Addons for Elementor" plugin  ...)
 	NOT-FOR-US: "Ultimate Addons for Elementor" plugin for WordPress
 CVE-2020-13124 (SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in ...)
-	NOT-FOR-US: SABnzbd
+	- sabnzbdplus <unfixed>
+	[buster] - sabnzbdplus <no-dsa> (Minor update, can be fixed via point release, contrib not supported)
+	NOTE: https://github.com/sabnzbd/sabnzbd/security/advisories/GHSA-9x87-96gg-33w2
+	NOTE: https://github.com/sabnzbd/sabnzbd/commit/dfcba6e2fb37f58fea06b453b1ba258c7f110429
+	NOTE: https://github.com/sabnzbd/sabnzbd/commit/73d3f7b5c248fc369de3454fe53e3e93924ebfe3
 CVE-2020-13123
 	RESERVED
 CVE-2020-13122 (The novish command-line interface, included in NoviFlow NoviWare befor ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d4a436ed98b2efe2b2098230a7fb279b136a4026

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d4a436ed98b2efe2b2098230a7fb279b136a4026
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200824/012cd944/attachment.html>