[Git][security-tracker-team/security-tracker][master] new nanopb issue

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
450280f9 by Moritz Muehlenhoff at 2021-03-24T17:26:33+01:00
new nanopb issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -18693,7 +18693,9 @@ CVE-2021-21403
 CVE-2021-21402 (Jellyfin is a Free Software Media System. In Jellyfin before version 1 ...)
 	NOT-FOR-US: Jellyfin
 CVE-2021-21401 (Nanopb is a small code-size Protocol Buffers implementation in ansi C. ...)
-	TODO: check
+	- nanopb <unfixed>
+	NOTE: https://github.com/nanopb/nanopb/security/advisories/GHSA-7mv5-5mxh-qg88
+	NOTE: https://github.com/nanopb/nanopb/commit/e2f0ccf939d9f82931d085acb6df8e9a182a4261
 CVE-2021-21400
 	RESERVED
 CVE-2021-21399



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/450280f99cd0f15d0270944cb0f6de7d8a3138a5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/450280f99cd0f15d0270944cb0f6de7d8a3138a5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210324/7e9571e0/attachment.htm>