[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage wordpress for stretch LTS.

Chris Lamb lamby at debian.org
Fri Jul 10 11:41:05 BST 2020



Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ebc19ccb by Chris Lamb at 2020-07-10T11:40:46+01:00
data/dla-needed.txt: Triage wordpress for stretch LTS.

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -171,6 +171,12 @@ unbound
   NOTE: 20200616: Not possible to update debian-security-support package in Jessie.
   NOTE: 20200616: https://lists.debian.org/debian-lts/2020/06/msg00038.html (bam)
 --
+wordpress
+  NOTE: 20200710: Vulnerable to at least CVE-2020-4046. (lamby)
+  NOTE: 20200710: During triage noticed that CVE-2020-4046 was marked as fixed
+  NOTE: 20200710: in 4.1.31+dfsg-0+deb8u1 in jessie LTS, yet does not seem that
+  NOTE: 20200710: it was vulnerable to begin with. (lamby)
+--
 wpa (Abhijith PA)
   NOTE: 20200709: #949367 is a stretch-pu update for CVE-2019-16275 (bunk)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ebc19ccb777ecaf403b2d39e9d2c553bc00cbe5f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ebc19ccb777ecaf403b2d39e9d2c553bc00cbe5f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200710/e8415675/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list