[Git][security-tracker-team/security-tracker][master] Update information on CVE-2019-12291/consul

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e4dccef4 by Salvatore Bonaccorso at 2020-02-03T21:41:46+01:00
Update information on CVE-2019-12291/consul

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -41539,7 +41539,9 @@ CVE-2019-12293 (In Poppler through 0.76.1, there is a heap-based buffer over-rea
 CVE-2019-12292 (Citrix AppDNA before 7 1906.1.0.472 has Incorrect Access Control. ...)
 	NOT-FOR-US: Citrix AppDNA
 CVE-2019-12291 (HashiCorp Consul 1.4.0 through 1.5.0 has Incorrect Access Control. Key ...)
-	- consul <unfixed>
+	- consul 1.4.5+dfsg1-1
+	[buster] - consul <not-affected> (Vulnerable code introduced in 1.4.0)
+	NOTE: https://github.com/hashicorp/consul/issues/5888
 CVE-2019-12290 (GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specifi ...)
 	- libidn2 2.2.0-1
 	[buster] - libidn2 <no-dsa> (Minor issue; intrusive to backport)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e4dccef45612150987f35dd01cd49d2285924bc2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e4dccef45612150987f35dd01cd49d2285924bc2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200203/e60a1793/attachment.html>