[Git][security-tracker-team/security-tracker][master] another libdbi-perl issue, new nss issue

Moritz Muehlenhoff jmm at debian.org
Fri Sep 11 13:00:55 BST 2020



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a199b32f by Moritz Muehlenhoff at 2020-09-11T14:00:19+02:00
another libdbi-perl issue, new nss issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -23037,6 +23037,9 @@ CVE-2020-14394
 	RESERVED
 CVE-2020-14393
 	RESERVED
+	- libdbi-perl 1.643-1
+	[buster] - libdbi-perl <no-dsa> (Minor issue)
+	NOTE: https://github.com/perl5-dbi/dbi/commit/36f2a2c5fea36d7d47d6871e420286643460e71b
 CVE-2020-14392
 	RESERVED
 	- libdbi-perl 1.643-1
@@ -28251,8 +28254,10 @@ CVE-2020-12415 (When "%2F" was present in a manifest URL, Firefox's AppCache beh
 CVE-2020-12414 (IndexedDB should be cleared when leaving private browsing mode and it  ...)
 	- firefox <not-affected> (Specific to Firefox on iOS)
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2020-23/#CVE-2020-12414
-CVE-2020-12413
+CVE-2020-12413 [racoon attack for NSS]
 	RESERVED
+	- nss <unfixed>
+	NOTE: https://raccoon-attack.com/
 CVE-2020-12412 (By navigating a tab using the history API, an attacker could cause the ...)
 	- firefox 70.0-1
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2019-34/#CVE-2020-12412



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a199b32f72cb12f1ff8ec7c66819c085c33873e4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a199b32f72cb12f1ff8ec7c66819c085c33873e4
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200911/8e68c552/attachment.html>


More information about the debian-security-tracker-commits mailing list