Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0cffc66d by Salvatore Bonaccorso at 2023-02-23T22:25:40+01:00
Add CVE-2022-3219/gnupg2
Mark it as unimprtant, as first the impact is low (slow processing) and
upstream does not consider to merge/apply the proposed change. Debian
should not diverge from upstream at this point.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -37522,7 +37522,12 @@ CVE-2022-40708 (An Out-of-bounds read vulnerability in
Trend Micro Deep Security
CVE-2022-40707 (An Out-of-bounds read vulnerability in Trend Micro Deep
Security 20 an ...)
NOT-FOR-US: Trend Micro
CVE-2022-3219 (GnuPG can be made to spin on a relatively small input by (for
example) ...)
- TODO: check
+ - gnupg2 <unfixed> (unimportant)
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2127010
+ NOTE: https://dev.gnupg.org/D556
+ NOTE: https://dev.gnupg.org/T5993
+ NOTE: https://www.openwall.com/lists/oss-security/2022/07/04/8
+ NOTE: GnuPG upstream is not implementing this change.
CVE-2022-3218 (Due to a reliance on client-side authentication, the WiFi Mouse
(Mouse ...)
NOT-FOR-US: Necta LLC
CVE-2022-3217 (When logging in to a VBASE runtime project via Web-Remote, the
product ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0cffc66d4a6697e0ba52ba9eefbcf8cb0ba4e6b1
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0cffc66d4a6697e0ba52ba9eefbcf8cb0ba4e6b1
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
