[Git][security-tracker-team/security-tracker][master] Adjust Debian bug references for rust-bzip2 and rust-tokio issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Wed Jan 18 21:19:07 GMT 2023



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9eda8f2d by Salvatore Bonaccorso at 2023-01-18T22:18:31+01:00
Adjust Debian bug references for rust-bzip2 and rust-tokio issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2716,7 +2716,7 @@ CVE-2023-22897
 CVE-2023-22896
 	RESERVED
 CVE-2023-22895 (The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denia ...)
-	- rust-bzip2 <unfixed> (bug #1029155)
+	- rust-bzip2 <unfixed> (bug #1029158)
 	[bullseye] - rust-bzip2 <no-dsa> (Minor issue)
 	[buster] - rust-bzip2 <no-dsa> (Minor issue)
 	NOTE: https://github.com/alexcrichton/bzip2-rs/pull/86
@@ -4490,7 +4490,7 @@ CVE-2023-22468
 CVE-2023-22467 (Luxon is a library for working with dates and times in JavaScript. On  ...)
 	NOT-FOR-US: Luxon
 CVE-2023-22466 (Tokio is a runtime for writing applications with Rust. Starting with v ...)
-	- rust-tokio <unfixed> (bug #1029155)
+	- rust-tokio <unfixed> (bug #1029157)
 	[bullseye] - rust-tokio <not-affected> (Only affects 1.7.0 and later)
 	NOTE: https://rustsec.org/advisories/RUSTSEC-2023-0001.html
 	NOTE: https://github.com/tokio-rs/tokio/security/advisories/GHSA-7rrj-xr53-82p7



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9eda8f2dad520ec49de79a5e37392b2f6487228a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9eda8f2dad520ec49de79a5e37392b2f6487228a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230118/3beea544/attachment.htm>


More information about the debian-security-tracker-commits mailing list