[Git][security-tracker-team/security-tracker][master] Triage CVE-2020-36309 in nginx for stretch LTS.

[Chris Lamb]

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8222d3f3 by Chris Lamb at 2021-04-13T10:31:21+01:00
Triage CVE-2020-36309 in nginx for stretch LTS.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1071,6 +1071,7 @@ CVE-2020-36310 (An issue was discovered in the Linux kernel before 5.8. arch/x86
 CVE-2020-36309 (ngx_http_lua_module (aka lua-nginx-module) before 0.10.16 in OpenResty ...)
 	- nginx <unfixed> (bug #986787)
 	[buster] - nginx <no-dsa> (Minor issue)
+	[stretch] - nginx <postponed> (Minor issue; can be fixed in next update)
 	NOTE: https://github.com/openresty/lua-nginx-module/pull/1654
 CVE-2020-36308 (Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discov ...)
 	- redmine 4.0.7-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8222d3f3ae37c9863dc5f8b9576f2b5ffaf92213

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8222d3f3ae37c9863dc5f8b9576f2b5ffaf92213
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210413/5002f285/attachment-0001.htm>