Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #226992

Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution

Show key headers only | View raw

	Hi.

Please do not top post.

On Tue, Sep 15, 2020 at 09:13:04AM +0000, Suryadevara, Revanth wrote:
> Hi Klaus,
> 	
> 1.) Pertaining to Nginx there is no CVE-ID, main concern is, 
> According to nginx download page, (http://nginx.org/en/download.html)
> Nginx 1.14.x is no longer supported and will not be getting regular
> patches. So, if any security Vulnerabilities arise then system would
> be at high risk as the vendor no longer provide updates.

No known CVE = no problem. Unless of course you just happen to know a
private zero-day.
And, as the version of nginx shows, they've fixed some CVEs in past,
trice for the duration of buster.


> 2.) Pertaining to GNOME Evolution , the CVE-ID is  CVE-2020-11879 .
> This ID isn't present in the links which you've shared.

Buster's evolution is vulnerable indeed - [1]. Security impact is low,
so it's hardly a surprise it is not fixed yet.

Reco

[1] https://security-tracker.debian.org/tracker/source-package/evolution

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Klaus Singvogel <deb-user-ml@singvogel.net> - 2020-09-15 10:20 +0200
  Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Reco <recoverym4n@enotuniq.net> - 2020-09-15 11:40 +0200
  Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Klaus Singvogel <deb-user-ml@singvogel.net> - 2020-09-15 11:40 +0200
    Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Greg Wooledge <wooledg@eeg.ccf.org> - 2020-09-15 14:50 +0200
    Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution <tomas@tuxteam.de> - 2020-09-15 14:50 +0200
    Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Dan Ritter <dsr@randomstring.org> - 2020-09-15 15:00 +0200
    Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Klaus Singvogel <deb-user-ml@singvogel.net> - 2020-09-15 15:40 +0200
      Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Greg Wooledge <wooledg@eeg.ccf.org> - 2020-09-15 15:50 +0200
      Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Eduardo M KALINOWSKI <eduardo@kalinowski.com.br> - 2020-09-15 16:00 +0200
  Re: Security Vulnerabilities with Nginx v1.14.2 and GNOME Evolution Greg Wooledge <wooledg@eeg.ccf.org> - 2020-09-15 13:40 +0200

csiph-web