[Git][security-tracker-team/security-tracker][master] 2 commits: Shorten slightly commit references for linus' git tree

Salvatore Bonaccorso carnil at debian.org
Fri Sep 25 09:13:53 BST 2020



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
33031bac by Salvatore Bonaccorso at 2020-09-25T10:12:34+02:00
Shorten slightly commit references for linus' git tree

- - - - -
f5a22e5f by Salvatore Bonaccorso at 2020-09-25T10:13:28+02:00
Process NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,39 +1,39 @@
 CVE-2020-26115 (cPanel before 90.0.10 allows self XSS via the Cron Editor interface (S ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2020-26114 (cPanel before 90.0.10 allows self XSS via the Cron Jobs interface (SEC ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2020-26113 (cPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interf ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2020-26112 (The email quota cache in cPanel before 90.0.10 allows overwriting of f ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2020-26111 (cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interf ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2020-26110 (cPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC inte ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2020-26109 (cPanel before 88.0.13 allows bypass of a protection mechanism that att ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2020-26108 (cPanel before 88.0.13 mishandles file-extension dispatching, leading t ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2020-26107 (cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDN ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2020-26106 (cPanel before 88.0.3 has weak permissions (world readable) for the pro ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2020-26105 (In cPanel before 88.0.3, insecure chkservd test credentials are used o ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2020-26104 (In cPanel before 88.0.3, an insecure SRS secret is used on a templated ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2020-26103 (In cPanel before 88.0.3, an insecure site password is used for Mailman ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2020-26102 (In cPanel before 88.0.3, an insecure auth policy API key is used by Do ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2020-26101 (In cPanel before 88.0.3, insecure RNDC credentials are used for BIND o ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2020-26100 (chsh in cPanel before 88.0.3 allows a Jailshell escape (SEC-497). ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2020-26099 (cPanel before 88.0.3 allows attackers to bypass the SMTP greylisting p ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2020-26098 (cPanel before 88.0.3 mishandles the Exim filter path, leading to remot ...)
-	TODO: check
+	NOT-FOR-US: cPanel
 CVE-2016-11086 (lib/oauth/consumer.rb in the oauth-ruby gem through 0.5.4 for Ruby doe ...)
 	TODO: check
 CVE-2020-26097
@@ -1018,7 +1018,7 @@ CVE-2020-25642
 CVE-2020-25641
 	RESERVED
 	- linux <unfixed>
-	NOTE: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7e24969022cbd61ddc586f14824fc205661bb124
+	NOTE: https://git.kernel.org/linus/7e24969022cbd61ddc586f14824fc205661bb124
 CVE-2020-25640
 	RESERVED
 	- wildfly <itp> (bug #752018)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/193c71928e304639976c83a3e7b6ce906153fcd0...f5a22e5fd2e02255475f73df5ad637e9f78495c8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/193c71928e304639976c83a3e7b6ce906153fcd0...f5a22e5fd2e02255475f73df5ad637e9f78495c8
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200925/e07a9b65/attachment.html>


More information about the debian-security-tracker-commits mailing list