[Git][security-tracker-team/security-tracker][master] Add CVE-2020-14301/libvirt

Salvatore Bonaccorso carnil at debian.org
Mon Jun 22 07:26:37 BST 2020



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e8061766 by Salvatore Bonaccorso at 2020-06-22T08:26:08+02:00
Add CVE-2020-14301/libvirt

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1635,8 +1635,11 @@ CVE-2020-14303
 	RESERVED
 CVE-2020-14302
 	RESERVED
-CVE-2020-14301
+CVE-2020-14301 [leak of sensitive cookie information via dumpxml]
 	RESERVED
+	- libvirt <not-affected> (Vulnerable code introduced with 6.2.0)
+	NOTE: Fixed by: https://github.com/libvirt/libvirt/commit/a5b064bf4b17a9884d7d361733737fb614ad8979
+	NOTE: Fixed by: https://github.com/libvirt/libvirt/commit/524de6cc35d3b222f0e940bb0fd027f5482572c5
 CVE-2020-14300
 	RESERVED
 CVE-2020-14299



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e8061766f9615ffd6a9dfe5a554fe7e678261da9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e8061766f9615ffd6a9dfe5a554fe7e678261da9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200622/a28618eb/attachment.html>


More information about the debian-security-tracker-commits mailing list