[Git][security-tracker-team/security-tracker][master] Mark CVE-2020-29600 and CVE-2020-35176 as no-dsa

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f0aab8b9 by Salvatore Bonaccorso at 2021-02-16T21:07:25+01:00
Mark CVE-2020-29600 and CVE-2020-35176 as no-dsa

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -18388,6 +18388,7 @@ CVE-2020-35177 (HashiCorp Vault and Vault Enterprise 1.4.1 and newer allowed the
 CVE-2020-35176 (In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a partial a ...)
 	{DLA-2506-1}
 	- awstats 7.8-2 (bug #977190)
+	[buster] - awstats <no-dsa> (Minor issue; can be fixed via point release)
 	NOTE: https://github.com/eldy/awstats/issues/195
 	NOTE: https://github.com/eldy/AWStats/commit/96756d7f40e002cc1e6ba72c633fb66b92e54f49
 CVE-2020-35175 (Frappe Framework 12 and 13 does not properly validate the HTTP method  ...)
@@ -20260,6 +20261,7 @@ CVE-2020-29601 (The official notary docker images before signer-0.6.1-1 contain
 CVE-2020-29600 (In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute ...)
 	{DLA-2506-1}
 	- awstats 7.8-1 (bug #891469)
+	[buster] - awstats <no-dsa> (Minor issue; can be fixed via point release)
 	NOTE: https://github.com/eldy/awstats/issues/90
 	NOTE: https://github.com/eldy/awstats/commit/d4d815d0caae3dbae83ac70a1ae4581bd57cf376
 CVE-2020-29599 (ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the - ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f0aab8b9d40f8762e58afcf4e86f013f00fe7bfb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f0aab8b9d40f8762e58afcf4e86f013f00fe7bfb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210216/8fa11d89/attachment.html>