[Git][security-tracker-team/security-tracker][master] Update status for CVE-2021-3751/libmobi
    Salvatore Bonaccorso (@carnil) 
    carnil at debian.org
       
    Thu Dec  9 08:08:30 GMT 2021
    
    
  
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
156297ae by Salvatore Bonaccorso at 2021-12-09T09:07:53+01:00
Update status for CVE-2021-3751/libmobi
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -14041,7 +14041,9 @@ CVE-2021-40330 (git_connect_git in connect.c in Git before 2.30.1 allows a repos
 CVE-2021-40329 (The Authentication API in Ping Identity PingFederate before 10.3 misha ...)
 	NOT-FOR-US: Ping Identity PingFederate
 CVE-2021-3751 (libmobi is vulnerable to Out-of-bounds Write ...)
-	- libmobi <unfixed>
+	- libmobi <not-affected> (Fixed before initial upload to Debian)
+	NOTE: https://huntr.dev/bounties/fcb4383c-bc27-4b89-bfce-6b041f0cb769/
+	NOTE: https://github.com/bfabiszewski/libmobi/commit/ab5bf0e37e540eac682a14e628853b918626e72b (v0.7)
 CVE-2021-40328
 	RESERVED
 CVE-2021-40327
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/156297ae2bb499a68d6c9972e9e7e985f518eb2d
-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/156297ae2bb499a68d6c9972e9e7e985f518eb2d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211209/f11163a4/attachment.htm>
    
    
More information about the debian-security-tracker-commits
mailing list