[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2020-15168/node-fetch
Salvatore Bonaccorso
carnil at debian.org
Sat Sep 12 14:38:02 BST 2020
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
241de687 by Salvatore Bonaccorso at 2020-09-12T15:37:19+02:00
Add Debian bug reference for CVE-2020-15168/node-fetch
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -21010,7 +21010,7 @@ CVE-2020-15169 (In Action View before versions 5.2.4.4 and 6.0.3.3 there is a po
NOTE: https://groups.google.com/g/rubyonrails-security/c/b-C9kSGXYrc?pli=1
NOTE: https://github.com/rails/rails/commit/e663f084460ea56c55c3dc76f78c7caeddeeb02e
CVE-2020-15168 (node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the si ...)
- - node-fetch <unfixed>
+ - node-fetch <unfixed> (bug #970173)
[buster] - node-fetch <no-dsa> (Minor issue)
NOTE: https://github.com/node-fetch/node-fetch/security/advisories/GHSA-w7rc-rwvf-8q5r
CVE-2020-15167 (In Miller (command line utility) using the configuration file support ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/241de687633b16810997aa1901157f88849e50b6
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/241de687633b16810997aa1901157f88849e50b6
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200912/f109a43a/attachment.html>
More information about the debian-security-tracker-commits
mailing list