[Git][security-tracker-team/security-tracker][master] Update details on old rust-base64 issue

[Paul Wise (@pabs)]

Paul Wise pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f2e871b1 by Paul Wise at 2021-08-30T14:20:41+08:00
Update details on old rust-base64 issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -230238,8 +230238,8 @@ CVE-2017-1000442 (Passbolt API version 1.6.4 and older are vulnerable to a XSS i
 CVE-2017-1000431 (eZ Systems eZ Publish version 5.4.0 to 5.4.9, and 5.3.12 and older, is ...)
 	NOT-FOR-US: eZ Systems eZ Publish
 CVE-2017-1000430 (rust-base64 version <= 0.5.1 is vulnerable to a buffer overflow whe ...)
-	NOTE: https://github.com/RustSec/advisory-db/blob/master/crates/base64/RUSTSEC-2017-0004.toml
-	NOT-FOR-US: rust-base64
+	- rust-base64 0.9.3-1
+	NOTE: https://rustsec.org/advisories/RUSTSEC-2017-0004.html
 CVE-2017-1000424 (Github Electron version 1.6.4 - 1.6.11 and 1.7.0 - 1.7.5 is vulnerable ...)
 	- electron <itp> (bug #842420)
 CVE-2017-1000423 (b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation ( ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f2e871b176a88ef6794300b5369e09832287ea7e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f2e871b176a88ef6794300b5369e09832287ea7e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210830/67d8749d/attachment.htm>