[Git][security-tracker-team/security-tracker][master] 2 commits: Added information about a rust vulnerability in rust-chrono without a CVE number

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Oct 20 18:13:58 BST 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1e43f40b by Alexander Kjäll at 2021-10-20T18:26:17+02:00
Added information about a rust vulnerability in rust-chrono without a CVE number

- - - - -
410ba6e8 by Salvatore Bonaccorso at 2021-10-20T19:13:00+02:00
Merge branch 'RUSTSEC-2020-0159'

Added information about a rust vulnerability in rust-chrono without a CVE number

See merge request security-tracker-team/security-tracker!91

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,7 @@
+CVE-2021-XXXX [RUSTSEC-2020-0159: Potential segfault in localtime_r invocations]
+	- rust-chrono <unfixed> (bug #996913)
+	NOTE: https://rustsec.org/advisories/RUSTSEC-2020-0159.html
+	NOTE: https://github.com/chronotope/chrono/issues/499
 CVE-2021-42742
 	RESERVED
 CVE-2021-42741



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/fc3f2a8817ad64ccb218a64837368afca9d75b40...410ba6e8029b72383591391ba96ef4012c63374c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/fc3f2a8817ad64ccb218a64837368afca9d75b40...410ba6e8029b72383591391ba96ef4012c63374c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211020/5965a78f/attachment.htm>


More information about the debian-security-tracker-commits mailing list