[Git][security-tracker-team/security-tracker][master] automatic update

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0a0c38a8 by security tracker role at 2020-02-22T20:10:36+00:00
automatic update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1105,6 +1105,7 @@ CVE-2020-8839 (Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converte
 	NOT-FOR-US: CHIYU BF-430 232/485 TCP/IP Converter devices
 CVE-2015-9542 [buffer overflow in password field]
 	RESERVED
+	{DLA-2116-1}
 	- libpam-radius-auth 1.4.0-3 (bug #951396)
 	NOTE: https://github.com/FreeRADIUS/pam_radius/commit/01173ec
 	NOTE: https://github.com/FreeRADIUS/pam_radius/commit/6bae92d
@@ -1641,7 +1642,7 @@ CVE-2020-8599
 CVE-2020-8598
 	RESERVED
 CVE-2020-8597 (eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overf ...)
-	{DLA-2097-1}
+	{DSA-4632-1 DLA-2097-1}
 	- lwip <unfixed> (bug #951291)
 	[experimental] - ppp 2.4.8-1+1~exp1
 	- ppp <unfixed> (bug #950618)
@@ -63153,12 +63154,13 @@ CVE-2019-5484 (Bower before 1.8.8 has a path traversal vulnerability permitting
 CVE-2019-5483 (Seneca < 3.9.0 contains a vulnerability that could lead to exposing ...)
 	NOT-FOR-US: Seneca
 CVE-2019-5482 (Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7. ...)
-	{DLA-1917-1}
+	{DSA-4633-1 DLA-1917-1}
 	- curl 7.66.0-1 (bug #940010)
 	NOTE: https://curl.haxx.se/docs/CVE-2019-5482.html
 	NOTE: Introduced by: https://github.com/curl/curl/commit/0516ce7786e9500c2e447d48aa9b3f24a6ca70f9
 	NOTE: Fixed by: https://github.com/curl/curl/commit/facb0e4662415b5f28163e853dc6742ac5fafb3d (curl-7_66_0)
 CVE-2019-5481 (Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7 ...)
+	{DSA-4633-1}
 	- curl 7.66.0-1 (bug #940009)
 	[jessie] - curl <not-affected> (Vulnerable code introduced later)
 	NOTE: https://curl.haxx.se/docs/CVE-2019-5481.html



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0a0c38a807bbef047f839861acf3ac9e74162abb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0a0c38a807bbef047f839861acf3ac9e74162abb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200222/949add1e/attachment.html>