Skip to content
Commits on Source (2)
......@@ -1404,6 +1404,7 @@ CVE-2019-16761
CVE-2019-16760 (Cargo prior to Rust 1.26.0 may download the wrong dependency if your p ...)
- cargo 0.27.0-1
[stretch] - cargo <postponed> (Upcoming upgrade of Cargo for ESR68 will fix this)
[jessie] - cargo <postponed> (Upcoming upgrade of Cargo for ESR68 will fix this)
NOTE: https://rustsec.org/advisories/CVE-2019-16760.html
CVE-2019-16759 (vBulletin 5.x through 5.5.4 allows remote command execution via the wi ...)
NOT-FOR-US: vBulletin
......@@ -2356,6 +2357,7 @@ CVE-2019-16375
- otrs2 6.0.23-1
[buster] - otrs2 <no-dsa> (Non-free not supported)
[stretch] - otrs2 <no-dsa> (Non-free not supported)
[jessie] - otrs2 <no-dsa> (Non-free not supported)
NOTE: https://community.otrs.com/security-advisory-2019-13-security-update-for-otrs-framework/
NOTE: https://github.com/OTRS/otrs/commit/aeb33d800716e2a6653597aa86314c4cbdadb678 (6.x)
NOTE: https://github.com/OTRS/otrs/commit/03ca8f396b1aa9933c212a63f52a9ea26c06e7da (5.x)