[Git][security-tracker-team/security-tracker][master] Add upstream commits for CVE-2020-5243/uap-core

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dbad1f6c by Salvatore Bonaccorso at 2020-02-26T18:30:14+01:00
Add upstream commits for CVE-2020-5243/uap-core

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9293,6 +9293,10 @@ CVE-2020-5244 (In BuddyPress before 5.1.2, requests to a certain REST API endpoi
 CVE-2020-5243 (uap-core before 0.7.3 is vulnerable to a denial of service attack when ...)
 	- uap-core <unfixed>
 	NOTE: https://github.com/ua-parser/uap-core/security/advisories/GHSA-cmcx-xhr8-3w9p
+	NOTE: https://github.com/ua-parser/uap-core/commit/a679b131697e7371f0441f4799940779efa2f27e
+	NOTE: https://github.com/ua-parser/uap-core/commit/dd279cff09546dbd4174bd05d29c0e90c2cffa7c
+	NOTE: https://github.com/ua-parser/uap-core/commit/7d92a383440c9742ec878273c90a4dcf8446f9af
+	NOTE: https://github.com/ua-parser/uap-core/commit/e9a1c74dae9ecd4aa6385bd34ef6c7243f89b537
 CVE-2020-5242 (openHAB before 2.5.2 allow a remote attacker to use REST calls to inst ...)
 	NOT-FOR-US: openHAB
 CVE-2020-5241 (matestack-ui-core (RubyGem) before 0.7.4 is vulnerable to XSS/Script i ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dbad1f6c02d2cabc777242537ce02d180bd7e45d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dbad1f6c02d2cabc777242537ce02d180bd7e45d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200226/a7a67eb4/attachment.html>