[Git][security-tracker-team/security-tracker][master] Add CVE-2020-1953/commons-configuration2

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8d730d14 by Salvatore Bonaccorso at 2020-03-15T21:43:23+01:00
Add CVE-2020-1953/commons-configuration2

The CVE is specific to the version 2 of Apache Commons Configuration and
therein version range from 2.2 to 2.6 is affected (fixed in 2.7).

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -21036,7 +21036,8 @@ CVE-2020-1955
 CVE-2020-1954
 	RESERVED
 CVE-2020-1953 (Apache Commons Configuration uses a third-party library to parse YAML  ...)
-	TODO: check
+	- commons-configuration2 <unfixed>
+	NOTE: https://www.openwall.com/lists/oss-security/2020/03/13/1
 CVE-2020-1952
 	RESERVED
 CVE-2020-1951



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8d730d1447192ba0afb0b9c4f8823a978d4fbf58

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8d730d1447192ba0afb0b9c4f8823a978d4fbf58
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200315/88d9b633/attachment-0001.html>