[Git][security-tracker-team/security-tracker][master] Fixes for etcd moved to unstabla via 3.3.25+dfsg-5 upload

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ad653550 by Salvatore Bonaccorso at 2020-10-10T17:47:15+02:00
Fixes for etcd moved to unstabla via 3.3.25+dfsg-5 upload

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -24815,7 +24815,7 @@ CVE-2020-15137 (All versions of HoRNDIS are affected by an integer overflow in t
 	NOT-FOR-US: HoRNDIS
 CVE-2020-15136 (In ectd before versions 3.4.10 and 3.3.23, gateway TLS authentication  ...)
 	[experimental] - etcd 3.3.25+dfsg-1
-	- etcd <unfixed> (bug #968752)
+	- etcd 3.3.25+dfsg-5 (bug #968752)
 	NOTE: https://github.com/etcd-io/etcd/security/advisories/GHSA-wr2v-9rpq-c35q
 CVE-2020-15135 (save-server (npm package) before version 1.05 is affected by a CSRF vu ...)
 	NOT-FOR-US: Node save-server
@@ -24874,19 +24874,19 @@ CVE-2020-15116
 	RESERVED
 CVE-2020-15115 (etcd before versions 3.3.23 and 3.4.10 does not perform any password l ...)
 	[experimental] - etcd 3.3.25+dfsg-1
-	- etcd <unfixed> (bug #968740)
+	- etcd 3.3.25+dfsg-5 (bug #968740)
 	NOTE: https://github.com/etcd-io/etcd/security/advisories/GHSA-4993-m7g5-r9hh
 CVE-2020-15114 (In etcd before versions 3.3.23 and 3.4.10, the etcd gateway is a simpl ...)
 	[experimental] - etcd 3.3.25+dfsg-1
-	- etcd <unfixed> (bug #968740)
+	- etcd 3.3.25+dfsg-5 (bug #968740)
 	NOTE: https://github.com/etcd-io/etcd/security/advisories/GHSA-2xhq-gv6c-p224
 CVE-2020-15113 (In etcd before versions 3.3.23 and 3.4.10, certain directory paths are ...)
 	[experimental] - etcd 3.3.25+dfsg-1
-	- etcd <unfixed> (bug #968740)
+	- etcd 3.3.25+dfsg-5 (bug #968740)
 	NOTE: https://github.com/etcd-io/etcd/security/advisories/GHSA-chh6-ppwq-jh92
 CVE-2020-15112 (In etcd before versions 3.3.23 and 3.4.10, it is possible to have an e ...)
 	[experimental] - etcd 3.3.25+dfsg-1
-	- etcd <unfixed> (bug #968740)
+	- etcd 3.3.25+dfsg-5 (bug #968740)
 	NOTE: https://github.com/etcd-io/etcd/security/advisories/GHSA-m332-53r6-2w93
 CVE-2020-15111 (In Fiber before version 1.12.6, the filename that is given in c.Attach ...)
 	NOT-FOR-US: Fiber
@@ -24904,7 +24904,7 @@ CVE-2020-15107 (In openenclave before 0.10.0, enclaves that use x87 FPU operatio
 	NOT-FOR-US: openenclave
 CVE-2020-15106 (In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic  ...)
 	[experimental] - etcd 3.3.25+dfsg-1
-	- etcd <unfixed> (bug #968740)
+	- etcd 3.3.25+dfsg-5 (bug #968740)
 	NOTE: https://github.com/etcd-io/etcd/security/advisories/GHSA-p4g4-wgrh-qrg2
 CVE-2020-15105 (Django Two-Factor Authentication before 1.12, stores the user's passwo ...)
 	NOT-FOR-US: Django Two-Factor Authentication



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ad653550e091b6bee48f55e334be0d4e4f6956e7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ad653550e091b6bee48f55e334be0d4e4f6956e7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201010/0a69773e/attachment-0001.html>