[Git][security-tracker-team/security-tracker][master] Add CVE-2020-7221 (MariaDB issue, but affects only 10.4.x)

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d9a1b36f by Salvatore Bonaccorso at 2020-02-05T21:56:12+01:00
Add CVE-2020-7221 (MariaDB issue, but affects only 10.4.x)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3122,7 +3122,8 @@ CVE-2020-7223
 CVE-2020-7222 (An issue was discovered in Amcrest Web Server 2.520.AC00.18.R 2017-06- ...)
 	NOT-FOR-US: Amcrest Web Server
 CVE-2020-7221 (mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege es ...)
-	TODO: check
+	- mariadb-10.3 <not-affected> (Only affects MariaDB 10.4.7 through 10.4.11)
+	- mariadb-10.1 <not-affected> (Only affects MariaDB 10.4.7 through 10.4.11)
 CVE-2020-7220 (HashiCorp Vault Enterprise 0.11.0 through 1.3.1 fails, in certain circ ...)
 	NOT-FOR-US: HashiCorp Vault
 CVE-2020-7219 (HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d9a1b36fff26efc6cbd4199305d1278f41e98850

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d9a1b36fff26efc6cbd4199305d1278f41e98850
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200205/c9a60122/attachment.html>