[Git][security-tracker-team/security-tracker][master] buster/bullseye triage

Moritz Muehlenhoff (@jmm) jmm at debian.org
Wed Nov 24 12:49:14 GMT 2021



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
91b14bd7 by Moritz Muehlenhoff at 2021-11-24T13:48:44+01:00
buster/bullseye triage

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -100581,16 +100581,22 @@ CVE-2020-16157 (A Stored XSS vulnerability exists in Nagios Log Server before 2.
 CVE-2020-16156 [Signature Verification Bypass]
 	RESERVED
 	- perl <unfixed>
+	[bullseye] - perl <no-dsa> (Minor issue)
+	[buster] - perl <no-dsa> (Minor issue)
 	NOTE: https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
 	NOTE: http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html
 CVE-2020-16155 [does not uniquely define signed data]
 	RESERVED
 	- libcpan-checksums-perl <unfixed>
+	[bullseye] - libcpan-checksums-perl <no-dsa> (Minor issue)
+	[buster] - libcpan-checksums-perl <no-dsa> (Minor issue)
 	NOTE: https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
 	NOTE: http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html
 CVE-2020-16154 [Signature Verification Bypass]
 	RESERVED
 	- cpanminus <unfixed>
+	[bullseye] - cpanminus <no-dsa> (Minor issue)
+	[buster] - cpanminus <no-dsa> (Minor issue)
 	NOTE: https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/
 	NOTE: http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html
 CVE-2020-16153



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/91b14bd7f23100923b81874367b749e50546aa16

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/91b14bd7f23100923b81874367b749e50546aa16
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211124/f713fecf/attachment.htm>


More information about the debian-security-tracker-commits mailing list