[Git][security-tracker-team/security-tracker][master] Add CVE-2020-25559/gnuplot

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
afec440c by Salvatore Bonaccorso at 2020-09-16T22:27:42+02:00
Add CVE-2020-25559/gnuplot

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -127,7 +127,10 @@ CVE-2020-25561
 CVE-2020-25560
 	RESERVED
 CVE-2020-25559 (gnuplot 5.5 is affected by double free when executing print_set_output ...)
-	TODO: check
+	- gnuplot <unfixed> (unimportant)
+	NOTE: https://sourceforge.net/p/gnuplot/bugs/2312/
+	NOTE: No security impact, gnuplot can execute arbitrary commands and need to
+	NOTE: come from a trusted source, see README.Debian.security (added in 5.2.6).
 CVE-2020-25558
 	RESERVED
 CVE-2020-25557



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/afec440c05956b4fc255b2672bba26667f4de37c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/afec440c05956b4fc255b2672bba26667f4de37c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200916/7bb90c16/attachment.html>