[Git][security-tracker-team/security-tracker][master] CVE-2020-35176/awstats: reference sanctioned patch
Sylvain Beucler
beuc at debian.org
Mon Jan 18 14:37:48 GMT 2021
Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker
Commits:
900116be by Sylvain Beucler at 2021-01-18T15:37:06+01:00
CVE-2020-35176/awstats: reference sanctioned patch
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -13184,6 +13184,7 @@ CVE-2020-35176 (In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a par
{DLA-2506-1}
- awstats <unfixed> (bug #977190)
NOTE: https://github.com/eldy/awstats/issues/195
+ NOTE: https://github.com/eldy/AWStats/commit/96756d7f40e002cc1e6ba72c633fb66b92e54f49
CVE-2020-35175 (Frappe Framework 12 and 13 does not properly validate the HTTP method ...)
NOT-FOR-US: Frappe Framework
CVE-2020-35174
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/900116bebfca7cd15183a046ad8691fb6c6abf50
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/900116bebfca7cd15183a046ad8691fb6c6abf50
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210118/7ada996b/attachment.html>
More information about the debian-security-tracker-commits
mailing list