[Git][security-tracker-team/security-tracker][master] Add CVE-2020-5236/waitress

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
62f9431b by Salvatore Bonaccorso at 2020-02-04T10:11:49+01:00
Add CVE-2020-5236/waitress

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7268,7 +7268,9 @@ CVE-2020-5238
 CVE-2020-5237
 	RESERVED
 CVE-2020-5236 (Waitress version 1.4.2 allows a DOS attack When waitress receives a he ...)
-	TODO: check
+	- waitress <unfixed>
+	NOTE: https://github.com/Pylons/waitress/security/advisories/GHSA-73m2-3pwg-5fgc
+	NOTE: https://github.com/Pylons/waitress/commit/6e46f9e3f014d64dd7d1e258eaf626e39870ee1f
 CVE-2020-5235 (There is a potentially exploitable out of memory condition In Nanopb b ...)
 	TODO: check
 CVE-2020-5234 (MessagePack for C# and Unity before version 1.9.3 and 2.1.80 has a vul ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/62f9431b8a405f76641824647ee0876c8b0022ec

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/62f9431b8a405f76641824647ee0876c8b0022ec
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200204/53d819a9/attachment.html>