[Git][security-tracker-team/security-tracker][master] Add CVE-2020-2774{5,6}/slurm-llnl

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b3f77754 by Salvatore Bonaccorso at 2020-11-14T10:37:21+01:00
Add CVE-2020-2774{5,6}/slurm-llnl

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4724,10 +4724,18 @@ CVE-2020-27748
 	RESERVED
 CVE-2020-27747 (An issue was discovered in Click Studios Passwordstate 8.9 (Build 8973 ...)
 	NOT-FOR-US: Click Studios Passwordstate
-CVE-2020-27746
-	RESERVED
-CVE-2020-27745
-	RESERVED
+CVE-2020-27746 [X11 forwarding - avoid unsafe use of magic cookie as arg to xauth command]
+	RESERVED
+	- slurm-llnl <unfixed>
+	NOTE: https://www.schedmd.com/news.php?id=240
+	NOTE: https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html
+	NOTE: https://github.com/SchedMD/slurm/commit/07309deb45c33e735e191faf9dd31cca1054a15c
+CVE-2020-27745 [PMIx - fix potential buffer overflows from use of unpackmem()]
+	RESERVED
+	- slurm-llnl <unfixed>
+	NOTE: https://www.schedmd.com/news.php?id=240
+	NOTE: https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html
+	NOTE: https://github.com/SchedMD/slurm/commit/c3142dd87e06621ff148791c3d2f298b5c0b3a81
 CVE-2020-27744 (An issue was discovered on Western Digital My Cloud NAS devices before ...)
 	NOT-FOR-US: Western Digital My Cloud NAS devices
 CVE-2020-27743 (libtac in pam_tacplus through 1.5.1 lacks a check for a failure of RAN ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b3f7775498c44d7eb537299759cdbf44008261f8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b3f7775498c44d7eb537299759cdbf44008261f8
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201114/40fc652b/attachment.html>