[Git][security-tracker-team/security-tracker][master] CVE-2020-35176/awstats: reference sanctioned patch

Sylvain Beucler beuc at debian.org
Mon Jan 18 14:37:48 GMT 2021



Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
900116be by Sylvain Beucler at 2021-01-18T15:37:06+01:00
CVE-2020-35176/awstats: reference sanctioned patch

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13184,6 +13184,7 @@ CVE-2020-35176 (In AWStats through 7.8, cgi-bin/awstats.pl?config= accepts a par
 	{DLA-2506-1}
 	- awstats <unfixed> (bug #977190)
 	NOTE: https://github.com/eldy/awstats/issues/195
+	NOTE: https://github.com/eldy/AWStats/commit/96756d7f40e002cc1e6ba72c633fb66b92e54f49
 CVE-2020-35175 (Frappe Framework 12 and 13 does not properly validate the HTTP method  ...)
 	NOT-FOR-US: Frappe Framework
 CVE-2020-35174



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/900116bebfca7cd15183a046ad8691fb6c6abf50

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/900116bebfca7cd15183a046ad8691fb6c6abf50
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210118/7ada996b/attachment.html>


More information about the debian-security-tracker-commits mailing list