Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
40d9091d by Moritz Muehlenhoff at 2023-02-21T19:48:31+01:00
rpm fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -122855,19 +122855,23 @@ CVE-2021-35940 (An out-of-bounds array read in the
apr_time_exp*() functions was
NOTE: http://svn.apache.org/viewvc?view=revision&revision=1891198
NOTE:
https://dist.apache.org/repos/dist/release/apr/patches/apr-1.7.0-CVE-2021-35940.patch
CVE-2021-35939 (It was found that the fix for CVE-2017-7500 and CVE-2017-7501
was inco ...)
- - rpm <unfixed> (bug #990543)
+ - rpm 4.18.0+dfsg-1 (bug #990543)
[bullseye] - rpm <ignored> (Minor issue)
[buster] - rpm <ignored> (Minor issue)
[stretch] - rpm <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1964129
+ NOTE: https://github.com/rpm-software-management/rpm/pull/1919
+ NOTE:
https://github.com/rpm-software-management/rpm/commit/96ec957e281220f8e137a2d5eb23b83a6377d556
CVE-2021-35938 (A symbolic link issue was found in rpm. It occurs when rpm
sets the de ...)
- - rpm <unfixed> (bug #990543)
+ - rpm 4.18.0+dfsg-1 (bug #990543)
[bullseye] - rpm <ignored> (Minor issue)
[buster] - rpm <ignored> (Minor issue)
[stretch] - rpm <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1964114
+ NOTE:
https://github.com/rpm-software-management/rpm/commit/25a435e90844ea98fe5eb7bef22c1aecf3a9c033
CVE-2021-35937 (A race condition vulnerability was found in rpm. A local
unprivileged ...)
- rpm <unfixed> (bug #990543)
+ [bookworm] - rpm <ignored> (Minor issue)
[bullseye] - rpm <ignored> (Minor issue)
[buster] - rpm <ignored> (Minor issue)
[stretch] - rpm <no-dsa> (Minor issue)
@@ -132990,7 +132994,7 @@ CVE-2020-36327 (Bundler 1.16.0 through 2.2.9 and
2.2.11 through 2.2.16 sometimes
[bullseye] - rubygems <no-dsa> (Minor issue)
NOTE: https://github.com/rubygems/rubygems/issues/3982
CVE-2021-3521 (There is a flaw in RPM's signature functionality. OpenPGP
subkeys are ...)
- - rpm <unfixed> (bug #1014723)
+ - rpm 4.18.0+dfsg-1 (bug #1014723)
[bullseye] - rpm <no-dsa> (Minor issue)
[buster] - rpm <no-dsa> (Minor issue)
[stretch] - rpm <no-dsa> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/40d9091df66adebe9c098ea7edee9a9d30716b2c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/40d9091df66adebe9c098ea7edee9a9d30716b2c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
