Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
9eda8f2d by Salvatore Bonaccorso at 2023-01-18T22:18:31+01:00
Adjust Debian bug references for rust-bzip2 and rust-tokio issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2716,7 +2716,7 @@ CVE-2023-22897
CVE-2023-22896
RESERVED
CVE-2023-22895 (The bzip2 crate before 0.4.4 for Rust allow attackers to cause
a denia ...)
- - rust-bzip2 <unfixed> (bug #1029155)
+ - rust-bzip2 <unfixed> (bug #1029158)
[bullseye] - rust-bzip2 <no-dsa> (Minor issue)
[buster] - rust-bzip2 <no-dsa> (Minor issue)
NOTE: https://github.com/alexcrichton/bzip2-rs/pull/86
@@ -4490,7 +4490,7 @@ CVE-2023-22468
CVE-2023-22467 (Luxon is a library for working with dates and times in
JavaScript. On ...)
NOT-FOR-US: Luxon
CVE-2023-22466 (Tokio is a runtime for writing applications with Rust.
Starting with v ...)
- - rust-tokio <unfixed> (bug #1029155)
+ - rust-tokio <unfixed> (bug #1029157)
[bullseye] - rust-tokio <not-affected> (Only affects 1.7.0 and later)
NOTE: https://rustsec.org/advisories/RUSTSEC-2023-0001.html
NOTE:
https://github.com/tokio-rs/tokio/security/advisories/GHSA-7rrj-xr53-82p7
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9eda8f2dad520ec49de79a5e37392b2f6487228a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9eda8f2dad520ec49de79a5e37392b2f6487228a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
