[Git][security-tracker-team/security-tracker][master] Add CVE-2021-41055/python-nbxmpp/gajim

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6fc45692 by Salvatore Bonaccorso at 2021-10-11T10:42:18+02:00
Add CVE-2021-41055/python-nbxmpp/gajim

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2491,7 +2491,11 @@ CVE-2021-41057
 CVE-2021-41056
 	RESERVED
 CVE-2021-41055 (Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a  ...)
-	TODO: check
+	- python-nbxmpp 2.0.4-1
+	NOTE: https://dev.gajim.org/gajim/gajim/-/issues/10638
+	NOTE: https://dev.gajim.org/gajim/python-nbxmpp/-/commit/8a626829d7c4b14077f764e61b1d1e867d21413f
+	NOTE: Fix in python-nbxmpp, and gajim 1.3.3 bumps depends on required nbxmpp version.
+	TODO: double-check correctness for tracking of source package, underlying issue is fixed in python-nbxmpp
 CVE-2021-41053
 	RESERVED
 CVE-2021-41052



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6fc456921e7237168e5b70c0e438b7041a55781f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6fc456921e7237168e5b70c0e438b7041a55781f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211011/977bcd7c/attachment.htm>