From c111884a0229890803ad593bfe4ce4763a9429bb Mon Sep 17 00:00:00 2001 From: Moritz Muehlenhoff Date: Mon, 19 Oct 2020 16:32:24 +0200 Subject: new rust-crossbeam-channel issue --- data/CVE/list | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/data/CVE/list b/data/CVE/list index 4e29328cfd..2d0b998966 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -25153,7 +25153,8 @@ CVE-2020-15256 CVE-2020-15255 (In Anuko Time Tracker before verion 1.19.23.5325, due to not properly ...) NOT-FOR-US: Anuko Time Tracker CVE-2020-15254 (Crossbeam is a set of tools for concurrent programming. In crossbeam-c ...) - TODO: check + - rust-crossbeam-channel 0.4.4-1 + NOTE: https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-v5m7-53cv-f3hx CVE-2020-15253 (Versions of Grocy <= 2.7.1 are vulnerable to Cross-Site Scripting v ...) NOT-FOR-US: Grocy CVE-2020-15252 (In XWiki before version 12.5 and 11.10.6, any user with SCRIPT right ( ...) -- cgit v1.2.3