[Git][security-tracker-team/security-tracker][master] automatic update
Salvatore Bonaccorso
carnil at debian.org
Sun Feb 2 08:10:22 GMT 2020
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
ac4be1df by security tracker role at 2020-02-02T08:10:14+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -20883,7 +20883,7 @@ CVE-2019-18636 (A cross-site scripting (XSS) vulnerability in Jitbit .NET Forum
CVE-2019-18635 (An issue was discovered in Mooltipass Moolticute through v0.42.1 and v ...)
NOT-FOR-US: Mooltipass Moolticute
CVE-2019-18634 (In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users ...)
- {DSA-4614-1}
+ {DSA-4614-1 DLA-2094-1}
- sudo 1.8.31-1 (bug #950371)
[buster] - sudo <no-dsa> (EOF handling introduced in 1.8.26 prevents exploitation of bug)
NOTE: https://www.sudo.ws/alerts/pwfeedback.html
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ac4be1df7791d80c69944e4878d9ffb1faffaf50
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/ac4be1df7791d80c69944e4878d9ffb1faffaf50
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200202/a03da8a5/attachment.html>
More information about the debian-security-tracker-commits
mailing list