[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2020-13956,httpcomponents-client: Link to fixing commit

[Markus Koschany]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
89c3a4a2 by Markus Koschany at 2020-10-09T22:37:41+02:00
CVE-2020-13956,httpcomponents-client: Link to fixing commit

- - - - -
d37e6137 by Markus Koschany at 2020-10-09T23:05:36+02:00
CVE-2020-13956,httpcomponents-client: Fixed in unstable.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -28097,8 +28097,9 @@ CVE-2020-13957
 	RESERVED
 CVE-2020-13956 [incorrect handling of malformed authority component in request URIs]
 	RESERVED
-	- httpcomponents-client <unfixed>
+	- httpcomponents-client 4.5.13-1
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1886587
+	NOTE: Fixed by https://github.com/apache/httpcomponents-client/commit/e628b4c5c464c2fa346385596cc78e035a91a62e
 CVE-2020-13955 (HttpUtils#getURLConnection method disables explicitly hostname verific ...)
 	TODO: check
 CVE-2020-13954



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/4376346ec33e6e0738dd709e6c1936e02cae95fb...d37e6137343d8b892b526c3fe04780cb0869aaef

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/4376346ec33e6e0738dd709e6c1936e02cae95fb...d37e6137343d8b892b526c3fe04780cb0869aaef
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201009/78b0150b/attachment-0001.html>