[Git][security-tracker-team/security-tracker][master] Track fixed version for CVE-2020-13757/python-rsa

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sun Sep 26 08:01:36 BST 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
128b6c39 by Salvatore Bonaccorso at 2021-09-26T09:01:05+02:00
Track fixed version for CVE-2020-13757/python-rsa

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -97155,12 +97155,12 @@ CVE-2020-13759 (rust-vmm vm-memory before 0.1.1 and 0.2.x before 0.2.1 allows at
 CVE-2020-13758 (modules/security/classes/general.post_filter.php/post_filter.php in th ...)
 	NOT-FOR-US: Bitrix24
 CVE-2020-13757 (Python-RSA before 4.1 ignores leading '\0' bytes during decryption of  ...)
-	- python-rsa <unfixed> (bug #962142)
+	- python-rsa 4.7.2-1 (bug #962142)
 	[buster] - python-rsa <no-dsa> (Minor issue)
 	[stretch] - python-rsa <no-dsa> (Minor issue)
 	[jessie] - python-rsa <no-dsa> (Minor issue)
 	NOTE: https://github.com/sybrenstuvel/python-rsa/issues/146
-	NOTE: https://github.com/sybrenstuvel/python-rsa/commit/93af6f2f89a9bf28361e67716c4240e691520f30
+	NOTE: https://github.com/sybrenstuvel/python-rsa/commit/93af6f2f89a9bf28361e67716c4240e691520f30 (version-4.1)
 CVE-2020-13756 (Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data ...)
 	NOT-FOR-US: Sabberworm PHP CSS Parser
 CVE-2020-13755



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/128b6c39458b75dc78c0b0d7c45df194b1401fe1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/128b6c39458b75dc78c0b0d7c45df194b1401fe1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210926/3ca64470/attachment.htm>


More information about the debian-security-tracker-commits mailing list