[Git][security-tracker-team/security-tracker][master] Track fixed version for RUSTSEC-2025-0005/rust-grcov via unstable
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Apr 15 19:28:00 BST 2025
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
bec9b915 by Salvatore Bonaccorso at 2025-04-15T20:27:01+02:00
Track fixed version for RUSTSEC-2025-0005/rust-grcov via unstable
Thanks: Peter Green
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -22329,7 +22329,7 @@ CVE-2024-12797 (Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to a
[bullseye] - openssl <not-affected> (Vulnerable code not present)
NOTE: https://openssl-library.org/news/secadv/20250211.txt
CVE-2025-XXXX [RUSTSEC-2025-0005: Out of bounds write triggered by crafted coverage data]
- - rust-grcov <unfixed>
+ - rust-grcov 0.8.22-1
[bookworm] - rust-grcov <no-dsa> (Minor issue)
NOTE: https://rustsec.org/advisories/RUSTSEC-2025-0005.html
NOTE: https://bugzilla.mozilla.org/show_bug.cgi?id=1917475
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bec9b9154ec4db91c3388a09ca1f03291ce2ea53
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bec9b9154ec4db91c3388a09ca1f03291ce2ea53
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250415/71c57c23/attachment.htm>
More information about the debian-security-tracker-commits
mailing list