summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2020-04-07 18:08:29 +0200
committerSalvatore Bonaccorso <carnil@debian.org>2020-04-07 18:08:29 +0200
commit6058ecc121fc33c94d18206a50a08b6cbf5f3e07 (patch)
tree45cc4dc1b06262678004166b3ef44e612a9f9c75
parent7c0f2145e484a575b62911c924c5afe33a0a4d68 (diff)
Add CVE-2020-1760/ceph
-rw-r--r--data/CVE/list10
1 files changed, 8 insertions, 2 deletions
diff --git a/data/CVE/list b/data/CVE/list
index af91320e1f..755da25773 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -24548,8 +24548,14 @@ CVE-2020-1762
CVE-2020-1761
RESERVED
NOT-FOR-US: OpenShift
-CVE-2020-1760
- RESERVED
+CVE-2020-1760 [header-splitting in RGW GetObject has a possible XSS]
+ RESERVED
+ - ceph <unfixed>
+ NOTE: Introduced with: https://github.com/ceph/ceph-ci/commit/f4a0b2d9260a4523745875e3977a8a1ef9dc5e2e
+ NOTE: Fixed by: https://github.com/ceph/ceph-ci/commit/8aa1f77363ec32bdc57744a143035033291ab5e1
+ NOTE: Fixed by: https://github.com/ceph/ceph-ci/commit/18eb4d918b27d362312c29a3bbd57a421897c0a5
+ NOTE: Fixed by: https://github.com/ceph/ceph-ci/commit/1bf14094fec34770d2cc74317f4238ccb2dfef98
+ NOTE: https://www.openwall.com/lists/oss-security/2020/04/07/1
CVE-2020-1759
RESERVED
CVE-2020-1758

© 2014-2024 Faster IT GmbH | imprint | privacy policy