[Git][security-tracker-team/security-tracker][master] rpm fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
40d9091d by Moritz Muehlenhoff at 2023-02-21T19:48:31+01:00
rpm fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -122855,19 +122855,23 @@ CVE-2021-35940 (An out-of-bounds array read in the apr_time_exp*() functions was
 	NOTE: http://svn.apache.org/viewvc?view=revision&revision=1891198
 	NOTE: https://dist.apache.org/repos/dist/release/apr/patches/apr-1.7.0-CVE-2021-35940.patch
 CVE-2021-35939 (It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was inco ...)
-	- rpm <unfixed> (bug #990543)
+	- rpm 4.18.0+dfsg-1 (bug #990543)
 	[bullseye] - rpm <ignored> (Minor issue)
 	[buster] - rpm <ignored> (Minor issue)
 	[stretch] - rpm <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1964129
+	NOTE: https://github.com/rpm-software-management/rpm/pull/1919
+	NOTE: https://github.com/rpm-software-management/rpm/commit/96ec957e281220f8e137a2d5eb23b83a6377d556
 CVE-2021-35938 (A symbolic link issue was found in rpm. It occurs when rpm sets the de ...)
-	- rpm <unfixed> (bug #990543)
+	- rpm 4.18.0+dfsg-1 (bug #990543)
 	[bullseye] - rpm <ignored> (Minor issue)
 	[buster] - rpm <ignored> (Minor issue)
 	[stretch] - rpm <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1964114
+	NOTE: https://github.com/rpm-software-management/rpm/commit/25a435e90844ea98fe5eb7bef22c1aecf3a9c033
 CVE-2021-35937 (A race condition vulnerability was found in rpm. A local unprivileged  ...)
 	- rpm <unfixed> (bug #990543)
+	[bookworm] - rpm <ignored> (Minor issue)
 	[bullseye] - rpm <ignored> (Minor issue)
 	[buster] - rpm <ignored> (Minor issue)
 	[stretch] - rpm <no-dsa> (Minor issue)
@@ -132990,7 +132994,7 @@ CVE-2020-36327 (Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes
 	[bullseye] - rubygems <no-dsa> (Minor issue)
 	NOTE: https://github.com/rubygems/rubygems/issues/3982
 CVE-2021-3521 (There is a flaw in RPM's signature functionality. OpenPGP subkeys are  ...)
-	- rpm <unfixed> (bug #1014723)
+	- rpm 4.18.0+dfsg-1 (bug #1014723)
 	[bullseye] - rpm <no-dsa> (Minor issue)
 	[buster] - rpm <no-dsa> (Minor issue)
 	[stretch] - rpm <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/40d9091df66adebe9c098ea7edee9a9d30716b2c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/40d9091df66adebe9c098ea7edee9a9d30716b2c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230221/d84f3637/attachment.htm>