[Git][security-tracker-team/security-tracker][master] Update status for CVE-2021-3751/libmobi

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Dec 9 08:08:30 GMT 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
156297ae by Salvatore Bonaccorso at 2021-12-09T09:07:53+01:00
Update status for CVE-2021-3751/libmobi

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14041,7 +14041,9 @@ CVE-2021-40330 (git_connect_git in connect.c in Git before 2.30.1 allows a repos
 CVE-2021-40329 (The Authentication API in Ping Identity PingFederate before 10.3 misha ...)
 	NOT-FOR-US: Ping Identity PingFederate
 CVE-2021-3751 (libmobi is vulnerable to Out-of-bounds Write ...)
-	- libmobi <unfixed>
+	- libmobi <not-affected> (Fixed before initial upload to Debian)
+	NOTE: https://huntr.dev/bounties/fcb4383c-bc27-4b89-bfce-6b041f0cb769/
+	NOTE: https://github.com/bfabiszewski/libmobi/commit/ab5bf0e37e540eac682a14e628853b918626e72b (v0.7)
 CVE-2021-40328
 	RESERVED
 CVE-2021-40327



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/156297ae2bb499a68d6c9972e9e7e985f518eb2d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/156297ae2bb499a68d6c9972e9e7e985f518eb2d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211209/f11163a4/attachment.htm>


More information about the debian-security-tracker-commits mailing list