[Git][security-tracker-team/security-tracker][master] git-lfs n/a

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
788786f3 by Moritz Muehlenhoff at 2020-11-06T10:27:58+01:00
git-lfs n/a

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -675,7 +675,8 @@ CVE-2020-27957 (The RandomGameUnit extension for MediaWiki through 1.35 was not
 CVE-2020-27956 (An Arbitrary File Upload in the Upload Image component in SourceCodest ...)
 	NOT-FOR-US: SourceCodester Car Rental Management System
 CVE-2020-27955 (Git LFS 2.12.0 allows Remote Code Execution. ...)
-	TODO: check
+	- git-lfs <not-affected> (Windows-specific)
+	NOTE: https://legalhackers.com/advisories/Git-LFS-RCE-Exploit-CVE-2020-27955.html
 CVE-2020-27954
 	RESERVED
 CVE-2020-27953



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/788786f33e018b22418e7f2c467901d826714f97

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/788786f33e018b22418e7f2c467901d826714f97
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201106/c9f6ce85/attachment.html>