[Git][security-tracker-team/security-tracker][master] 2 commits: Add Debian bug reference for GHSL-2021-045/glib2.0 issue

Salvatore Bonaccorso carnil at debian.org
Sun Feb 14 11:49:44 GMT 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1c23aa34 by Salvatore Bonaccorso at 2021-02-14T12:47:38+01:00
Add Debian bug reference for GHSL-2021-045/glib2.0 issue

- - - - -
16000ea7 by Salvatore Bonaccorso at 2021-02-14T12:48:20+01:00
Add one secondary glib2.0 issue following GHSL-2021-045

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -827,8 +827,11 @@ CVE-2021-21299 (hyper is an open-source HTTP library for Rust (crates.io). In hy
 	- rust-hyper <unfixed>
 	NOTE: https://github.com/hyperium/hyper/security/advisories/GHSA-6hfq-h8hq-87mf
 	NOTE: https://rustsec.org/advisories/RUSTSEC-2021-0020.html
+CVE-2021-XXXX [Integer overflow in g_byte_array_new_take()/g_bytes_unref_to_array() on 64-bit platforms]
+	- glib2.0 2.66.7-1 (bug #982779)
+	NOTE: https://gitlab.gnome.org/GNOME/glib/-/merge_requests/1942
 CVE-2021-XXXX [GHSL-2021-045: integer overflow in g_bytes_new/g_memdup]
-	- glib2.0 2.66.6-1
+	- glib2.0 2.66.6-1 (bug #982778)
 	NOTE: https://gitlab.gnome.org/GNOME/glib/-/issues/2319
 CVE-2021-26842
 	RESERVED



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/06bdfaa2d13f7cba9b9260ebd438cb6c24b6c20f...16000ea7d452e342df5043a3fc3731e74edba8cf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/06bdfaa2d13f7cba9b9260ebd438cb6c24b6c20f...16000ea7d452e342df5043a3fc3731e74edba8cf
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210214/ec4b91e2/attachment.html>


More information about the debian-security-tracker-commits mailing list