[Git][security-tracker-team/security-tracker][master] Add CVE-2022-1249/pesign

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
12037373 by Salvatore Bonaccorso at 2022-04-07T06:34:49+02:00
Add CVE-2022-1249/pesign

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4,6 +4,11 @@ CVE-2022-28662
 	RESERVED
 CVE-2022-28661
 	RESERVED
+CVE-2022-1249 [NULL pointer dereference in cms_set_pw_data()]
+	- pesign <not-affected> (Vulnerable code introduced later)
+	NOTE: https://github.com/rhboot/pesign/pull/79
+	NOTE: Introduced by: https://github.com/rhboot/pesign/commit/12f16710ee44ef64ddb044a3523c3c4c4d90039a (114)
+	NOTE: Fixed by: https://github.com/rhboot/pesign/commit/b879dda52f8122de697d145977c285fb0a022d76 (115)
 CVE-2022-1240
 	RESERVED
 CVE-2022-1239



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1203737344e087baab3f74ea0e71e63eeca60870

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1203737344e087baab3f74ea0e71e63eeca60870
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220407/6ebb9704/attachment.htm>