[Git][security-tracker-team/security-tracker][master] Add fixed version for CVE-2020-8086/prosody-modules

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1ac0d72b by Salvatore Bonaccorso at 2020-01-28T21:57:18+01:00
Add fixed version for CVE-2020-8086/prosody-modules

The upstable upload contained 0003-ldap-improve-checks.patch which is
the upstream fix for the CVE from
https://hg.prosody.im/prosody-modules/rev/f2b29183ef08 .

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -477,7 +477,7 @@ CVE-2019-20435 (An issue was discovered in WSO2 API Manager 2.6.0. A reflected X
 CVE-2019-20434 (An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflect ...)
 	NOT-FOR-US: WSO2
 CVE-2020-8086 (The mod_auth_ldap and mod_auth_ldap2 Community Modules through 2020-01 ...)
-	- prosody-modules <unfixed>
+	- prosody-modules 0.0~hg20200128.09e7e880e056+dfsg-1
 	NOTE: https://hg.prosody.im/prosody-modules/rev/f2b29183ef08
 	NOTE: https://prosody.im/security/advisory_20200128/
 CVE-2020-8085



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1ac0d72b7e46e440907c03846febf0c2fc075a63

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/1ac0d72b7e46e440907c03846febf0c2fc075a63
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200128/e3c42a80/attachment.html>