[Git][security-tracker-team/security-tracker][master] associate CVE-2023-42811 to src:rust-aes-gcm

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
48447821 by Moritz Muehlenhoff at 2025-12-30T11:49:20+01:00
associate CVE-2023-42811 to src:rust-aes-gcm

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -241135,7 +241135,9 @@ CVE-2023-42821 (The package `github.com/gomarkdown/markdown` is a Go library for
 CVE-2023-42812 (Galaxy is an open-source platform for FAIR data analysis. Prior to ver ...)
 	NOT-FOR-US: Galaxy
 CVE-2023-42811 (aes-gcm is a pure Rust implementation of the AES-GCM. Starting in vers ...)
-	NOT-FOR-US: Rust crate aes-gcm
+	- rust-aes-gcm <not-affected> (Fixed with initial upload to archive)
+	NOTE: https://rustsec.org/advisories/RUSTSEC-2023-0096.html
+	NOTE: https://github.com/RustCrypto/AEADs/security/advisories/GHSA-423w-p2w9-r7vq
 CVE-2023-42798 (AutomataCI is a template git repository equipped with a native built-i ...)
 	NOT-FOR-US: AutomataCI
 CVE-2023-41031 (Command injection inhomemng.htminJuplink RX4-1500 versions V1.0.2,V1.0 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/48447821794b1e95543f2b54ad6dfd8f7032d9fb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/48447821794b1e95543f2b54ad6dfd8f7032d9fb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20251230/601ee521/attachment.htm>