[Git][security-tracker-team/security-tracker][master] new rust-tokio issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
37363961 by Moritz Muehlenhoff at 2023-01-09T20:02:04+01:00
new rust-tokio issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1509,7 +1509,10 @@ CVE-2023-22468
 CVE-2023-22467 (Luxon is a library for working with dates and times in JavaScript. On  ...)
 	NOT-FOR-US: Luxon
 CVE-2023-22466 (Tokio is a runtime for writing applications with Rust. Starting with v ...)
-	TODO: check
+	- rust-tokio <unfixed>
+	[bullseye] - rust-tokio <not-affected> (Only affects 1.7.0 and later)
+	NOTE: https://rustsec.org/advisories/RUSTSEC-2023-0001.html
+	NOTE: https://github.com/tokio-rs/tokio/security/advisories/GHSA-7rrj-xr53-82p7
 CVE-2023-22465 (Http4s is a Scala interface for HTTP services. Starting with version 0 ...)
 	NOT-FOR-US: http4s
 CVE-2023-22463 (KubePi is a k8s panel. The jwt authentication function of KubePi throu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/37363961acaaca1502d61fbaeca03158bc655840

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/37363961acaaca1502d61fbaeca03158bc655840
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230109/d170ac88/attachment-0001.htm>