[Git][security-tracker-team/security-tracker][master] Reference partial mitigation for CVE-2020-14145

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d2ced27a by Salvatore Bonaccorso at 2020-12-02T21:09:00+01:00
Reference partial mitigation for CVE-2020-14145

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -37004,6 +37004,7 @@ CVE-2020-14145 (The client side in OpenSSH 5.7 through 8.3 has an Observable Dis
 	NOTE: https://www.fzi.de/fileadmin/user_upload/2020-06-26-FSA-2020-2.pdf
 	NOTE: The OpenSSH project is not planning to change the behaviour of OpenSSH regarding
 	NOTE: the issue, details in "3.1 OpenSSH" in the publication.
+	NOTE: Partial mitigation: https://anongit.mindrot.org/openssh.git/commit/?id=b3855ff053f5078ec3d3c653cdaedefaa5fc362d (V_8_4_P1)
 CVE-2020-14144 (** DISPUTED ** The git hook feature in Gitea 1.1.0 through 1.12.5 migh ...)
 	- gitea <removed>
 CVE-2020-14143



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d2ced27a29e7d0670f361c1d0b28b0c04b78d742

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d2ced27a29e7d0670f361c1d0b28b0c04b78d742
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201202/366db9ef/attachment-0001.html>