[Git][security-tracker-team/security-tracker][master] Add reference to upstream fix for CVE-2020-8632/cloud-init

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7cad1234 by Salvatore Bonaccorso at 2020-02-15T11:35:18+01:00
Add reference to upstream fix for CVE-2020-8632/cloud-init

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -790,6 +790,7 @@ CVE-2020-8632 (In cloud-init through 19.4, rand_user_password in cloudinit/confi
 	[stretch] - cloud-init <no-dsa> (Minor issue)
 	NOTE: https://bugs.launchpad.net/ubuntu/+source/cloud-init/+bug/1860795
 	NOTE: https://github.com/canonical/cloud-init/pull/189
+	NOTE: https://github.com/canonical/cloud-init/commit/42788bf24a1a0a5421a2d00a7f59b59e38ba1a14
 CVE-2020-8631 (cloud-init through 19.4 relies on Mersenne Twister for a random passwo ...)
 	- cloud-init <unfixed>
 	[buster] - cloud-init <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7cad12340590d87b055878a1401d66689149c763

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7cad12340590d87b055878a1401d66689149c763
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200215/c95dacf4/attachment.html>