[Git][security-tracker-team/security-tracker][master] Add information on CVE-2020-1763/libreswan

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3f160655 by Salvatore Bonaccorso at 2020-05-12T21:40:20+02:00
Add information on CVE-2020-1763/libreswan

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -29210,6 +29210,8 @@ CVE-2020-1764 (A hard-coded cryptographic key vulnerability in the default confi
 CVE-2020-1763
 	RESERVED
 	- libreswan <unfixed>
+	NOTE: Introduced by: https://github.com/libreswan/libreswan/commit/fa004e7d4b83fbeaa8d0f6d8430a96aed97a97b9 (v3.27)
+	NOTE: Fixed by: https://github.com/libreswan/libreswan/commit/471a3e41a449d7c753bc4edbba4239501bb62ba8
 	NOTE: https://libreswan.org/security/CVE-2020-1763/CVE-2020-1763.txt
 CVE-2020-1762 (An insufficient JWT validation vulnerability was found in Kiali versio ...)
 	NOT-FOR-US: Kiali



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3f1606556b3dd7d8556d04e8b90869d588db9c9e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3f1606556b3dd7d8556d04e8b90869d588db9c9e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200512/d80cdb39/attachment-0001.html>