[Git][security-tracker-team/security-tracker][master] CVE-2021-42863/iotjs unfixed, code not present in buster

[Neil Williams (@codehelp)]

Neil Williams pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6e54249a by Neil Williams at 2022-05-13T08:17:15+01:00
CVE-2021-42863/iotjs unfixed, code not present in buster

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -37946,7 +37946,11 @@ CVE-2021-42865
 CVE-2021-42864
 	RESERVED
 CVE-2021-42863 (A buffer overflow in ecma_builtin_typedarray_prototype_filter() in Jer ...)
-	TODO: check
+	- iotjs <unfixed>
+	[buster] - iotjs <not-affected> (Vulnerable code introduced later)
+	NOTE: https://github.com/jerryscript-project/jerryscript/issues/4793
+	NOTE: https://github.com/jerryscript-project/jerryscript/pull/4794
+	NOTE: https://github.com/jerryscript-project/jerryscript/commit/4e8d6344a8b5cf8f00bd3d5e869147af06d0189e
 CVE-2021-42862
 	RESERVED
 CVE-2021-42861



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e54249a4da2ecee147229ceefc0fe7ceb43ace9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6e54249a4da2ecee147229ceefc0fe7ceb43ace9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220513/7e4b9a16/attachment-0001.htm>