[Git][security-tracker-team/security-tracker][master] Add CVE-2020-68{38,39,40}/mruby, futher checks pending

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6b81486d by Salvatore Bonaccorso at 2020-01-11T13:52:22+01:00
Add CVE-2020-68{38,39,40}/mruby, futher checks pending

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13,10 +13,21 @@ CVE-2020-6842
 CVE-2020-6841
 	RESERVED
 CVE-2020-6840 (In mruby 2.1.0, there is a use-after-free in hash_slice in mrbgems/mru ...)
+	- mruby <undetermined>
+	NOTE: https://github.com/mruby/mruby/issues/4927
+	NOTE: https://github.com/mruby/mruby/commit/fc8fb41451b07b3fda0726ba80e88e509ad02452
 	TODO: check
 CVE-2020-6839 (In mruby 2.1.0, there is a stack-based buffer overflow in mrb_str_len_ ...)
+	- murby <undetermined>
+	NOTE: https://github.com/mruby/mruby/issues/4929
+	NOTE: https://github.com/mruby/mruby/commit/2124b9b4c95e66e63b1eb26a8dab49753b82fd6c
 	TODO: check
 CVE-2020-6838 (In mruby 2.1.0, there is a use-after-free in hash_values_at in mrbgems ...)
+	- mruby <undetermined>
+	NOTE: https://github.com/mruby/mruby/issues/4926
+	NOTE: https://github.com/mruby/mruby/commit/fc8fb41451b07b3fda0726ba80e88e509ad02452
+	NOTE: https://github.com/mruby/mruby/commit/70e574689664c10ed2c47581999cc2ce3e3c5afb
+	NOTE: https://github.com/mruby/mruby/commit/2742ded32fe18f88833d76b297f5c2170b6880c3
 	TODO: check
 CVE-2020-6837
 	RESERVED



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6b81486db41168ea5c404bc0308bdab7c12c81fa

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6b81486db41168ea5c404bc0308bdab7c12c81fa
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200111/bb8fe0d4/attachment.html>