Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
403edb08 by Salvatore Bonaccorso at 2022-09-07T06:17:17+02:00
Revert "Marked CVE-2021-30130 as not affected in buster for php-phpseclib
and phpseclib."
This reverts commit 16e672276cedba5df6867af30bdf216ca32b4721.
See commit 59a03babf1e8e9dd14d6afe7d884ea6e70e528d7.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -97895,10 +97895,8 @@ CVE-2021-30131
RESERVED
CVE-2021-30130 (phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA
PKCS#1 v1. ...)
- phpseclib 1.0.19-3
- [buster] - phpseclib <not-affected> (Only affects 3.x branch)
[stretch] - phpseclib <not-affected> (Only affects 3.x branch)
- php-phpseclib 2.0.30-2
- [buster] - php-phpseclib <not-affected> (Only affects 3.x branch)
[stretch] - php-phpseclib <not-affected> (Only affects 3.x branch)
- php-phpseclib3 3.0.7-1
NOTE:
https://github.com/phpseclib/phpseclib/pull/1635#issuecomment-826994890
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/403edb08a00d92a0603e6cac5e2f7cd1e557171d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/403edb08a00d92a0603e6cac5e2f7cd1e557171d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits