[Git][security-tracker-team/security-tracker][master] Reference upstream commit for older encfs issue
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri May 19 20:58:24 BST 2023
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
adc59b42 by Salvatore Bonaccorso at 2023-05-19T21:57:30+02:00
Reference upstream commit for older encfs issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -497955,6 +497955,7 @@ CVE-2014-3462 (The ".encfs6.xml" configuration file in encfs before 1.7.5 allows
NOTE: Shortcoming documented in 1.7.4-4
NOTE: https://defuse.ca/audits/encfs.htm
NOTE: Upstream issue: https://github.com/vgough/encfs/issues/14
+ NOTE: https://github.com/vgough/encfs/commit/9d06412f1c68b0607f27f2a4434a2801fa807a2d (v1.8.1)
CVE-2014-3453 (Eval injection vulnerability in the flag_import_form_validate function ...)
NOT-FOR-US: Drupal module
CVE-2014-3444 (The GetGUID function in codecs/dmp4.dll in RealNetworks RealPlayer 16. ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/adc59b42974aed5972446b838c4208ab6894f758
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/adc59b42974aed5972446b838c4208ab6894f758
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230519/54d0dbe9/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list