[Git][security-tracker-team/security-tracker][master] Add fixing commits for a couple of mbedtls issues

Emilio Pozuelo Monfort (@pochu) pochu at debian.org
Thu Nov 4 09:05:54 GMT 2021



Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
78d3b1d8 by Emilio Pozuelo Monfort at 2021-11-04T10:05:32+01:00
Add fixing commits for a couple of mbedtls issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11382,8 +11382,11 @@ CVE-2020-36477 (An issue was discovered in Mbed TLS before 2.24.0. The verificat
 	NOTE: https://github.com/ARMmbed/mbedtls/issues/3498
 CVE-2020-36476 (An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 L ...)
 	- mbedtls 2.16.9-0.1
+	NOTE: https://github.com/ARMmbed/mbedtls/commit/a321413807927d6e295cec8677733bbde6aeec34 (development)
+	NOTE: https://github.com/ARMmbed/mbedtls/commit/ef73875913c66767e7a954aa0b68f42f0756d9b2 (mbedtls-2.7)
 CVE-2020-36475 (An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 L ...)
 	- mbedtls 2.16.9-0.1
+	NOTE: https://github.com/ARMmbed/mbedtls/commit/9246d041500b96fb0694cbda1d833e420696827e
 CVE-2021-39362 (An XSS issue was discovered in ReCaptcha Solver 5.7. A response from A ...)
 	NOT-FOR-US: ReCaptcha Solver
 CVE-2021-39361 (In GNOME evolution-rss through 0.3.96, network-soup.c does not enable  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/78d3b1d85c7304fe7f692e043002ffabfa6c0f9e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/78d3b1d85c7304fe7f692e043002ffabfa6c0f9e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211104/b1e314d4/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list