[Git][security-tracker-team/security-tracker][master] libtasn1-6 spu

Moritz Muehlenhoff (@jmm) jmm at debian.org
Tue Nov 1 11:28:30 GMT 2022



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b9488dbb by Moritz Muehlenhoff at 2022-11-01T12:27:10+01:00
libtasn1-6 spu

- - - - -


2 changed files:

- data/CVE/list
- data/next-point-update.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -3845,6 +3845,7 @@ CVE-2021-46849 (pikepdf before 2.10.0 allows an XXE attack against PDF XMP metad
 	TODO: check
 CVE-2021-46848 (GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check ...)
 	- libtasn1-6 4.19.0-2
+	[bullseye] - libtasn1-6 <no-dsa> (Minor issue)
 	[buster] - libtasn1-6 <no-dsa> (Minor issue)
 	NOTE: https://gitlab.com/gnutls/libtasn1/-/commit/44a700d2051a666235748970c2df047ff207aeb5 (v4.19.0)
 	NOTE: https://gitlab.com/gnutls/libtasn1/-/issues/32


=====================================
data/next-point-update.txt
=====================================
@@ -42,3 +42,5 @@ CVE-2022-42906
 	[bullseye] - powerline-gitstatus 1.3.2-0+deb11u1
 CVE-2021-42260
 	[bullseye] - tinyxml 2.6.2-4+deb11u1
+CVE-2021-46848
+	[bullseye] - libtasn1-6 4.16.0-2+deb11u1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b9488dbb669d7a384c8b078ede8799315af6de59

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b9488dbb669d7a384c8b078ede8799315af6de59
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221101/cf687a81/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list