[Git][security-tracker-team/security-tracker][master] Try to clarify the needing bits for CVE-2021-20230

Salvatore Bonaccorso carnil at debian.org
Fri Feb 12 06:13:42 GMT 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c8016dc3 by Salvatore Bonaccorso at 2021-02-12T07:13:06+01:00
Try to clarify the needing bits for CVE-2021-20230

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -16673,6 +16673,8 @@ CVE-2021-20230 [client certificate not correctly verified when redirect and veri
 	RESERVED
 	- stunnel4 <unfixed>
 	NOTE: https://github.com/mtrojnar/stunnel/commit/ebad9ddc4efb2635f37174c9d800d06206f1edf9
+	NOTE: Isolated fix only the changes in src/verify.c:
+	NOTE: https://bugzilla.suse.com/show_bug.cgi?id=1177580#c2
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1925226
 CVE-2021-20229 [postgres: information leak in some select statements]
 	RESERVED



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8016dc3bf2e9a68d6feccd76c452dd85242e6c5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c8016dc3bf2e9a68d6feccd76c452dd85242e6c5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210212/1b1e9f0e/attachment.html>


More information about the debian-security-tracker-commits mailing list