[Git][security-tracker-team/security-tracker][master] Splitup incomplete fix for CVE-2020-29600 to CVE-2020-35176

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
16d19f73 by Salvatore Bonaccorso at 2020-12-12T09:21:47+01:00
Splitup incomplete fix for CVE-2020-29600 to CVE-2020-35176

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9,7 +9,8 @@ CVE-2020-35178
 CVE-2020-35177
 	RESERVED
 CVE-2020-35176 (In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial a ...)
-	TODO: check
+	- awstats <unfixed>
+	NOTE: https://github.com/eldy/awstats/issues/195
 CVE-2020-35175 (Frappe Framework 12 and 13 does not properly validate the HTTP method  ...)
 	NOT-FOR-US: Frappe Framework
 CVE-2020-35174
@@ -1838,10 +1839,9 @@ CVE-2020-29602 (The official irssi docker images before 1.1-alpine (Alpine speci
 CVE-2020-29601 (The official notary docker images before signer-0.6.1-1 contain a blan ...)
 	NOT-FOR-US: notary Docker images
 CVE-2020-29600 (In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute ...)
-	- awstats <unfixed> (bug #891469)
+	- awstats 7.8-1 (bug #891469)
 	NOTE: https://github.com/eldy/awstats/issues/90
 	NOTE: https://github.com/eldy/awstats/commit/d4d815d0caae3dbae83ac70a1ae4581bd57cf376
-	NOTE: https://github.com/eldy/awstats/issues/195 (another unfixed vector)
 CVE-2020-29599 (ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the - ...)
 	- imagemagick <unfixed>
 	NOTE: https://github.com/ImageMagick/ImageMagick/discussions/2851



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/16d19f73af23ca3fd30a384fbf4aa3b037f2f884

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/16d19f73af23ca3fd30a384fbf4aa3b037f2f884
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201212/d82377ea/attachment.html>