[Git][security-tracker-team/security-tracker][master] buster/bullseye triage
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Wed Nov 24 12:49:14 GMT 2021
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
91b14bd7 by Moritz Muehlenhoff at 2021-11-24T13:48:44+01:00
buster/bullseye triage
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -100581,16 +100581,22 @@ CVE-2020-16157 (A Stored XSS vulnerability exists in Nagios Log Server before 2.
CVE-2020-16156 [Signature Verification Bypass]
RESERVED
- perl <unfixed>
+ [bullseye] - perl <no-dsa> (Minor issue)
+ [buster] - perl <no-dsa> (Minor issue)
NOTE: https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
NOTE: http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html
CVE-2020-16155 [does not uniquely define signed data]
RESERVED
- libcpan-checksums-perl <unfixed>
+ [bullseye] - libcpan-checksums-perl <no-dsa> (Minor issue)
+ [buster] - libcpan-checksums-perl <no-dsa> (Minor issue)
NOTE: https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
NOTE: http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html
CVE-2020-16154 [Signature Verification Bypass]
RESERVED
- cpanminus <unfixed>
+ [bullseye] - cpanminus <no-dsa> (Minor issue)
+ [buster] - cpanminus <no-dsa> (Minor issue)
NOTE: https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
NOTE: http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html
CVE-2020-16153
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/91b14bd7f23100923b81874367b749e50546aa16
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/91b14bd7f23100923b81874367b749e50546aa16
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211124/f713fecf/attachment.htm>
More information about the debian-security-tracker-commits
mailing list