[Git][security-tracker-team/security-tracker][master] libtasn1-6 spu
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Tue Nov 1 11:28:30 GMT 2022
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
b9488dbb by Moritz Muehlenhoff at 2022-11-01T12:27:10+01:00
libtasn1-6 spu
- - - - -
2 changed files:
- data/CVE/list
- data/next-point-update.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -3845,6 +3845,7 @@ CVE-2021-46849 (pikepdf before 2.10.0 allows an XXE attack against PDF XMP metad
TODO: check
CVE-2021-46848 (GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check ...)
- libtasn1-6 4.19.0-2
+ [bullseye] - libtasn1-6 <no-dsa> (Minor issue)
[buster] - libtasn1-6 <no-dsa> (Minor issue)
NOTE: https://gitlab.com/gnutls/libtasn1/-/commit/44a700d2051a666235748970c2df047ff207aeb5 (v4.19.0)
NOTE: https://gitlab.com/gnutls/libtasn1/-/issues/32
=====================================
data/next-point-update.txt
=====================================
@@ -42,3 +42,5 @@ CVE-2022-42906
[bullseye] - powerline-gitstatus 1.3.2-0+deb11u1
CVE-2021-42260
[bullseye] - tinyxml 2.6.2-4+deb11u1
+CVE-2021-46848
+ [bullseye] - libtasn1-6 4.16.0-2+deb11u1
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b9488dbb669d7a384c8b078ede8799315af6de59
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b9488dbb669d7a384c8b078ede8799315af6de59
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221101/cf687a81/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list