[Git][security-tracker-team/security-tracker][master] new consul issue

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bd70fb2a by Moritz Muehlenhoff at 2020-11-06T10:50:31+01:00
new consul issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7301,7 +7301,9 @@ CVE-2020-25575 (** UNSUPPORTED WHEN ASSIGNED ** An issue was discovered in the f
 CVE-2020-25202
 	RESERVED
 CVE-2020-25201 (HashiCorp Consul Enterprise version 1.7.0 up to 1.8.4 includes a names ...)
-	TODO: check
+	- consul <unfixed>
+	NOTE: https://github.com/hashicorp/consul/pull/9024
+	NOTE: https://github.com/hashicorp/consul/blob/master/CHANGELOG.md#185-october-23-2020
 CVE-2020-25200 (Pritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames ...)
 	NOT-FOR-US: Pritunl
 CVE-2019-20916 (The pip package before 19.2 for Python allows Directory Traversal when ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd70fb2a4f00183f4956fb323f38bc08026ef0af

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bd70fb2a4f00183f4956fb323f38bc08026ef0af
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201106/a3bf8980/attachment.html>