[Git][security-tracker-team/security-tracker][master] Add information on CVE-2020-15889/lua

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
087d8cb6 by Salvatore Bonaccorso at 2020-07-26T15:01:28+02:00
Add information on CVE-2020-15889/lua

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -133,7 +133,14 @@ CVE-2020-15890 (LuaJit through 2.1.0-beta3 has an out-of-bounds read because __g
 	- luajit <unfixed> (bug #966148)
 	NOTE: https://github.com/LuaJIT/LuaJIT/issues/601
 CVE-2020-15889 (Lua through 5.4.0 has a getobjname heap-based buffer over-read because ...)
-	TODO: check
+	- lua5.4 5.4.0-2
+	- lua5.3 <undetermined>
+	- lua5.2 <undetermined>
+	- lua5.1 <undetermined>
+	- lua5.0 <undetermined>
+	NOTE: http://lua-users.org/lists/lua-l/2020-07/msg00078.html
+	NOTE: https://github.com/lua/lua/commit/127e7a6c8942b362aa3c6627f44d660a4fb75312
+	TODO: check details for older versions
 CVE-2020-15888 (Lua through 5.4.0 mishandles the interaction between stack resizes and ...)
 	TODO: check
 CVE-2020-15887 (A SQL injection vulnerability in softwareupdate_controller.php in the  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/087d8cb6975ecb05978071adde234fb3f20fd367

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/087d8cb6975ecb05978071adde234fb3f20fd367
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200726/545bf5b0/attachment.html>