[Git][security-tracker-team/security-tracker][master] new rust-bzip2 issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
16e13cfc by Moritz Muehlenhoff at 2023-01-10T13:52:20+01:00
new rust-bzip2 issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -29,7 +29,10 @@ CVE-2023-22897
 CVE-2023-22896
 	RESERVED
 CVE-2023-22895 (The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denia ...)
-	TODO: check
+	- rust-bzip2 <unfixed>
+	[bullseye] - rust-bzip2 <no-dsa> (Minor issue)
+	NOTE: https://github.com/alexcrichton/bzip2-rs/pull/86
+	NOTE: https://github.com/alexcrichton/bzip2-rs/commit/90c9c182cd5a5ebc75810aebd89b347a7bdf590b (0.4.4)
 CVE-2023-22894
 	RESERVED
 CVE-2023-22893



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/16e13cfcad9b3bed80b5d2e5bdc4c640a4fc21e2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/16e13cfcad9b3bed80b5d2e5bdc4c640a4fc21e2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230110/9bc148c6/attachment-0001.htm>