[Git][security-tracker-team/security-tracker][master] wordpress: CVE-2020-XXXX (comments leak) fixed with DLA-2371-1

[Sylvain Beucler]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
683b6fb4 by Sylvain Beucler at 2020-09-11T19:29:47+02:00
wordpress: CVE-2020-XXXX (comments leak) fixed with DLA-2371-1

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -24067,6 +24067,7 @@ CVE-2020-14039 (In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verif
 CVE-2020-XXXX [Editor: Ensure latest comments can only be viewed from public posts]
 	- wordpress 5.4.2+dfsg1-1 (bug #962685)
 	[buster] - wordpress 5.0.10+dfsg1-0+deb10u1
+	[stretch] - wordpress 4.7.18+dfsg-1+deb9u1
 	NOTE: https://core.trac.wordpress.org/changeset/47984
 CVE-2020-4050 (In affected versions of WordPress, misuse of the `set-screen-option` f ...)
 	{DSA-4709-1 DLA-2269-1}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/683b6fb4f5a125822b0554d245ae979298595bb7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/683b6fb4f5a125822b0554d245ae979298595bb7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200911/e24e7a0a/attachment.html>