Summary: | <net-misc/axel-2.17.8: Lack of server TLS certificate validation (CVE-2020-13614) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Sam James <sam> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | jlec, slashbeast |
Priority: | Normal | Flags: | nattka:
sanity-check+
|
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://github.com/axel-download-accelerator/axel/issues/262 | ||
Whiteboard: | B3 [noglsa cve] | ||
Package list: |
=net-misc/axel-2.17.8
|
Runtime testing required: | --- |
Description
Sam James
2020-05-27 13:26:46 UTC
@maintainer(s), please advise if ready for stabilisation, or call yourself. If you can, keep an eye on changelogs for such entries, because the CVE has only been assigneed a month and a bit later :( acked on irc sparc stable ppc64 stable ppc stable amd64 stable x86 stable. Maintainer(s), please cleanup. Security, please vote. The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9247fcd98b8728fa1aced9119bf5290c19c60254 commit 9247fcd98b8728fa1aced9119bf5290c19c60254 Author: Piotr Karbowski <slashbeast@gentoo.org> AuthorDate: 2020-06-06 21:17:05 +0000 Commit: Piotr Karbowski <slashbeast@gentoo.org> CommitDate: 2020-06-06 21:17:32 +0000 net-misc/axel: 2.17.7 drop. Bug: https://bugs.gentoo.org/725632 Signed-off-by: Piotr Karbowski <slashbeast@gentoo.org> net-misc/axel/Manifest | 1 - net-misc/axel/axel-2.17.7.ebuild | 48 ---------------------------------------- 2 files changed, 49 deletions(-) Thanks! All done on your end. :) |