[Git][security-tracker-team/security-tracker][master] new rust-hyper, rust-xcb issues

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2f72fa6e by Moritz Muehlenhoff at 2021-02-06T20:13:53+01:00
new rust-hyper, rust-xcb issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,10 @@
+CVE-2021-XXXX [hyper: Multiple Transfer-Encoding headers misinterprets request payload]
+	- rust-hyper <unfixed>
+	NOTE: https://github.com/hyperium/hyper/security/advisories/GHSA-6hfq-h8hq-87mf
+	NOTE: https://rustsec.org/advisories/RUSTSEC-2021-0020.html
+CVE-2021-XXXX [xcb: Multiple soundness issues]
+	- rust-xcb <unfixed>
+	NOTE: https://rustsec.org/advisories/RUSTSEC-2021-0019.html
 CVE-2021-XXXX [GHSL-2021-045: integer overflow in g_bytes_new/g_memdup]
 	- glib2.0 2.66.6-1
 	NOTE: https://gitlab.gnome.org/GNOME/glib/-/issues/2319



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2f72fa6e279edfbb845998925e1f87d372b35428

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2f72fa6e279edfbb845998925e1f87d372b35428
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210206/f1705607/attachment-0001.html>