summaryrefslogtreecommitdiffstats
path: root/data
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2020-06-05 17:04:05 +0200
committerSalvatore Bonaccorso <carnil@debian.org>2020-06-05 17:05:23 +0200
commit9f01719146fd05e2391b66f1c49f34c23575acc5 (patch)
tree239ecccc0e550b36c9c07449f175664f80074838 /data
parentc1c615ecad4a381be877542862c5734e94e317ac (diff)
Mark CVE-2020-13848 as no-dsa for buster and stretch
Diffstat (limited to 'data')
-rw-r--r--data/CVE/list2
1 files changed, 2 insertions, 0 deletions
diff --git a/data/CVE/list b/data/CVE/list
index 01025de261..dffcb17888 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -36,7 +36,9 @@ CVE-2020-13849 (The MQTT protocol 3.1.1 requires a server to set a timeout value
TODO: check
CVE-2020-13848 (Portable UPnP SDK (aka libupnp) 1.12.1 and earlier allows remote attac ...)
- pupnp-1.8 <unfixed>
+ [buster] - pupnp-1.8 <no-dsa> (Minor issue)
- libupnp <removed>
+ [stretch] - libupnp <no-dsa> (Minor issue)
NOTE: https://github.com/pupnp/pupnp/issues/177
NOTE: https://github.com/pupnp/pupnp/commit/c805c1de1141cb22f74c0d94dd5664bda37398e0
CVE-2020-13847

© 2014-2024 Faster IT GmbH | imprint | privacy policy