Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
81c7e237 by Salvatore Bonaccorso at 2021-09-26T09:02:21+02:00
Mark python-rsa issues as no-dsa for bullseye
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -69814,6 +69814,7 @@ CVE-2020-25659 (python-cryptography 3.2 is vulnerable
to Bleichenbacher timing a
NOTE:
https://github.com/pyca/cryptography/commit/58494b41d6ecb0f56b7c5f05d5f5e3ca0320d494
(3.2)
CVE-2020-25658 (It was found that python-rsa is vulnerable to Bleichenbacher
timing at ...)
- python-rsa <unfixed> (bug #974685)
+ [bullseye] - python-rsa <no-dsa> (Minor issue)
[buster] - python-rsa <no-dsa> (Minor issue)
[stretch] - python-rsa <no-dsa> (Minor issue)
NOTE: https://github.com/sybrenstuvel/python-rsa/issues/165
@@ -97156,6 +97157,7 @@ CVE-2020-13758
(modules/security/classes/general.post_filter.php/post_filter.php
NOT-FOR-US: Bitrix24
CVE-2020-13757 (Python-RSA before 4.1 ignores leading '\0' bytes during
decryption of ...)
- python-rsa 4.7.2-1 (bug #962142)
+ [bullseye] - python-rsa <no-dsa> (Minor issue)
[buster] - python-rsa <no-dsa> (Minor issue)
[stretch] - python-rsa <no-dsa> (Minor issue)
[jessie] - python-rsa <no-dsa> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/81c7e237e5c054275b8ff97da0bcacf437a63ade
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/81c7e237e5c054275b8ff97da0bcacf437a63ade
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
