[Git][security-tracker-team/security-tracker][master] Add CVE-2020-35681/python-django-channels

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fab13d9e by Salvatore Bonaccorso at 2020-12-31T08:37:24+01:00
Add CVE-2020-35681/python-django-channels

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -381,8 +381,10 @@ CVE-2020-35683
 	RESERVED
 CVE-2020-35682
 	RESERVED
-CVE-2020-35681
+CVE-2020-35681 [Potential leakage of session identifiers using legacy]
 	RESERVED
+	- python-django-channels <unfixed>
+	NOTE: https://channels.readthedocs.io/en/latest/releases/3.0.3.html
 CVE-2020-35680 (smtpd/lka_filter.c in OpenSMTPD before 6.8.0p1, in certain configurati ...)
 	- opensmtpd 6.8.0p2-1 (bug #978039)
 	NOTE: https://github.com/openbsd/src/commit/6c3220444ed06b5796dedfd53a0f4becd903c0d1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fab13d9e1c9a03c1e3c26386afce1c8afe66e59d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fab13d9e1c9a03c1e3c26386afce1c8afe66e59d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201231/fb63c2c6/attachment-0001.html>