[Git][security-tracker-team/security-tracker][master] Update information for CVE-2020-2569{4,5,6}
Salvatore Bonaccorso
carnil at debian.org
Fri Nov 13 07:06:58 GMT 2020
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
aee8fd3f by Salvatore Bonaccorso at 2020-11-13T08:06:33+01:00
Update information for CVE-2020-2569{4,5,6}
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -7942,18 +7942,30 @@ CVE-2020-25697
- libx11 <undetermined>
NOTE: https://www.openwall.com/lists/oss-security/2020/11/09/3
TODO: check correct packages to track
-CVE-2020-25696
+CVE-2020-25696 [psql's \gset allows overwriting specially treated variables]
RESERVED
- postgresql-13 13.1-1
- TODO: Reference news entries and older major versions affected
-CVE-2020-25695
+ - postgresql-12 <unfixed>
+ - postgresql-11 <removed>
+ [buster] - postgresql-11 <no-dsa> (Minor issue)
+ - postgresql-9.6 <removed>
+ NOTE: https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/
+CVE-2020-25695 [Multiple features escape "security restricted operation" sandbox]
RESERVED
- postgresql-13 13.1-1
- TODO: Reference news entries and older major versions affected
-CVE-2020-25694
+ - postgresql-12 <unfixed>
+ - postgresql-11 <removed>
+ [buster] - postgresql-11 <no-dsa> (Minor issue)
+ - postgresql-9.6 <removed>
+ NOTE: https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/
+CVE-2020-25694 [Reconnection can downgrade connection security settings]
RESERVED
- postgresql-13 13.1-1
- TODO: Reference news entries and older major versions affected
+ - postgresql-12 <unfixed>
+ - postgresql-11 <removed>
+ [buster] - postgresql-11 <no-dsa> (Minor issue)
+ - postgresql-9.6 <removed>
+ NOTE: https://www.postgresql.org/about/news/postgresql-131-125-1110-1015-9620-and-9524-released-2111/
CVE-2020-25693
RESERVED
- cimg <unfixed> (bug #973770)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aee8fd3f7353c95cb1d6fda3f04889f4b112cd54
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/aee8fd3f7353c95cb1d6fda3f04889f4b112cd54
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201113/ff3c8412/attachment-0001.html>
More information about the debian-security-tracker-commits
mailing list