[Git][security-tracker-team/security-tracker][master] Remove unimportant severity for CVE-2019-20790

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat Jun 12 13:55:51 BST 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c6ec335f by Salvatore Bonaccorso at 2021-06-12T14:54:51+02:00
Remove unimportant severity for CVE-2019-20790

Upstream did reconsider their posiition on the CVE-2019-20790
assessment. Thus remove the unimportant severity instead move a no-dsa
tag for buster.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -82810,7 +82810,8 @@ CVE-2020-12267 (setMarkdown in Qt before 5.14.2 has a use-after-free related to
 	NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20450
 	NOTE: The 5.14 in experimental contains the code, but is already fixed
 CVE-2019-20790 (OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, ...)
-	- opendmarc 1.4.0~beta1+dfsg-4 (bug #977766; unimportant)
+	- opendmarc 1.4.0~beta1+dfsg-4 (bug #977766)
+	[buster] - opendmarc <no-dsa> (Minor issue)
 	NOTE: https://bugs.launchpad.net/pypolicyd-spf/+bug/1838816
 	NOTE: https://sourceforge.net/p/opendmarc/tickets/235/
 	NOTE: https://www.usenix.org/system/files/sec20fall_chen-jianjun_prepub_0.pdf



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c6ec335f6da869f91b9739eced2c41601f3e4457

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c6ec335f6da869f91b9739eced2c41601f3e4457
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210612/153ac17c/attachment.htm>


More information about the debian-security-tracker-commits mailing list