[Git][security-tracker-team/security-tracker][master] CVE-2024-7531/nss: does not affect bullseye

Arturo Borrero González (@arturo) arturo at debian.org
Sun Oct 27 19:01:27 GMT 2024



Arturo Borrero González pushed to branch master at Debian Security Tracker / security-tracker


Commits:
52c90c3f by Arturo Borrero Gonzalez at 2024-10-27T20:01:18+01:00
CVE-2024-7531/nss: does not affect bullseye

See also:
 https://groups.google.com/a/mozilla.org/g/dev-tech-crypto/c/h3Q2S0n2vTg/m/abQtMoYYAgAJ

Signed-off-by: Arturo Borrero Gonzalez <arturo at debian.org>

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -19338,6 +19338,7 @@ CVE-2024-7531 (Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same b
 	- firefox-esr 115.14.0esr-1
 	- nss 2:3.103-1
 	[bookworm] - nss <ignored> (Minor issue)
+	[bullseye] - nss <not-affected> (Vulnerable code introduced in 3.72)
 	NOTE: https://bugzilla.mozilla.org/show_bug.cgi?id=1905691
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-33/#CVE-2024-7531
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2024-34/#CVE-2024-7531



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/52c90c3f0daaa8626601713ccc533caa86ee4a24

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/52c90c3f0daaa8626601713ccc533caa86ee4a24
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241027/193af15a/attachment.htm>


More information about the debian-security-tracker-commits mailing list