[Git][security-tracker-team/security-tracker][master] Track some update for cacti via buster-pu sync up status in CVE list

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
46e41482 by Salvatore Bonaccorso at 2020-07-02T21:18:25+02:00
Track some update for cacti via buster-pu sync up status in CVE list

- - - - -


2 changed files:

- data/CVE/list
- data/next-point-update.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -5509,9 +5509,13 @@ CVE-2020-13232
 	RESERVED
 CVE-2020-13231 (In Cacti before 1.2.11, auth_profile.php?action=edit allows CSRF for a ...)
 	- cacti 1.2.11+ds1-1
+	[buster] - cacti <no-dsa> (Minor issue)
+	[stretch] - cacti <no-dsa> (Minor issue)
 	NOTE: https://github.com/Cacti/cacti/issues/3342
 CVE-2020-13230 (In Cacti before 1.2.11, disabling a user account does not immediately  ...)
 	- cacti 1.2.11+ds1-1
+	[buster] - cacti <no-dsa> (Minor issue)
+	[stretch] - cacti <no-dsa> (Minor issue)
 	NOTE: https://github.com/Cacti/cacti/issues/3343
 CVE-2020-13229 (An issue was discovered in Sysax Multi Server 6.90. A session can be h ...)
 	NOT-FOR-US: Sysax Multi Server
@@ -21566,6 +21570,8 @@ CVE-2020-7238 (Netty 4.1.43.Final allows HTTP Request Smuggling because it misha
 	NOTE: https://github.com/netty/netty/issues/9861#issuecomment-582307539 (same fix as CVE-2019-20445)
 CVE-2020-7237 (Cacti 1.2.8 allows Remote Code Execution (by privileged users) via she ...)
 	- cacti 1.2.9+ds1-1 (bug #949997)
+	[buster] - cacti <no-dsa> (Minor issue)
+	[stretch] - cacti <no-dsa> (Minor issue)
 	[jessie] - cacti <not-affected> (Vulnerable code introduced later)
 	NOTE: https://github.com/Cacti/cacti/issues/3201
 	NOTE: https://github.com/Cacti/cacti/commit/5010719dbd160198be3e07bb994cf237e3af1308


=====================================
data/next-point-update.txt
=====================================
@@ -90,3 +90,11 @@ CVE-2020-5963
 	[buster] - nvidia-graphics-drivers-legacy-390xx 390.138-1~deb10u1
 CVE-2020-5967
 	[buster] - nvidia-graphics-drivers-legacy-390xx 390.138-1~deb10u1
+CVE-2020-7237
+	[buster] - cacti 1.2.2+ds1-2+deb10u3
+CVE-2020-7106
+	[buster] - cacti 1.2.2+ds1-2+deb10u3
+CVE-2020-13230
+	[buster] - cacti 1.2.2+ds1-2+deb10u3
+CVE-2020-13231
+	[buster] - cacti 1.2.2+ds1-2+deb10u3



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/46e414826c9adf405e3eb3728369663033ac82ea

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/46e414826c9adf405e3eb3728369663033ac82ea
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200702/7c689618/attachment.html>