[Git][security-tracker-team/security-tracker][master] Mark python-rsa issues as no-dsa for bullseye
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sun Sep 26 08:02:47 BST 2021
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
81c7e237 by Salvatore Bonaccorso at 2021-09-26T09:02:21+02:00
Mark python-rsa issues as no-dsa for bullseye
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -69814,6 +69814,7 @@ CVE-2020-25659 (python-cryptography 3.2 is vulnerable to Bleichenbacher timing a
NOTE: https://github.com/pyca/cryptography/commit/58494b41d6ecb0f56b7c5f05d5f5e3ca0320d494 (3.2)
CVE-2020-25658 (It was found that python-rsa is vulnerable to Bleichenbacher timing at ...)
- python-rsa <unfixed> (bug #974685)
+ [bullseye] - python-rsa <no-dsa> (Minor issue)
[buster] - python-rsa <no-dsa> (Minor issue)
[stretch] - python-rsa <no-dsa> (Minor issue)
NOTE: https://github.com/sybrenstuvel/python-rsa/issues/165
@@ -97156,6 +97157,7 @@ CVE-2020-13758 (modules/security/classes/general.post_filter.php/post_filter.php
NOT-FOR-US: Bitrix24
CVE-2020-13757 (Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ...)
- python-rsa 4.7.2-1 (bug #962142)
+ [bullseye] - python-rsa <no-dsa> (Minor issue)
[buster] - python-rsa <no-dsa> (Minor issue)
[stretch] - python-rsa <no-dsa> (Minor issue)
[jessie] - python-rsa <no-dsa> (Minor issue)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/81c7e237e5c054275b8ff97da0bcacf437a63ade
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/81c7e237e5c054275b8ff97da0bcacf437a63ade
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210926/482a427c/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list