Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
c624c873 by Moritz Muehlenhoff at 2025-01-17T14:17:05+01:00
mark libtar as removed from sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -288074,22 +288074,22 @@ CVE-2021-33648 (When performing the inference shape 
operation of Affine, Concat,
 CVE-2021-33647 (When performing the inference shape operation of the Tile 
operator, if ...)
        NOT-FOR-US: Mindspore deep learning
 CVE-2021-33646 (The th_read() function doesn\u2019t free a variable 
t->th_buf.gnu_long ...)
-       - libtar <unfixed>
+       - libtar <removed>
        [bookworm] - libtar <no-dsa> (Minor issue)
        NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2121295
        NOTE: (not-upstream) patch from OpenEuler: 
https://gitee.com/src-openeuler/libtar/blob/master/openEuler-CVE-2021-33645-CVE-2021-33646.patch
 CVE-2021-33645 (The th_read() function doesn\u2019t free a variable 
t->th_buf.gnu_long ...)
-       - libtar <unfixed>
+       - libtar <removed>
        [bookworm] - libtar <no-dsa> (Minor issue)
        NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2121295
        NOTE: (not-upstream) patch from OpenEuler: 
https://gitee.com/src-openeuler/libtar/blob/master/openEuler-CVE-2021-33645-CVE-2021-33646.patch
 CVE-2021-33644 (An attacker who submits a crafted tar file with size in header 
struct  ...)
-       - libtar <unfixed>
+       - libtar <removed>
        [bookworm] - libtar <no-dsa> (Minor issue)
        NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2121292
        NOTE: (not-upstream) patch from OpenEuler: 
https://gitee.com/src-openeuler/libtar/blob/master/openEuler-CVE-2021-33645-CVE-2021-33646.patch
 CVE-2021-33643 (An attacker who submits a crafted tar file with size in header 
struct  ...)
-       - libtar <unfixed>
+       - libtar <removed>
        [bookworm] - libtar <no-dsa> (Minor issue)
        NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2121289
        NOTE: (not-upstream) patch from OpenEuler: 
https://gitee.com/src-openeuler/libtar/blob/master/openEuler-CVE-2021-33645-CVE-2021-33646.patch



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c624c873a333ea811503d8fbe25f91c8599e85e5

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c624c873a333ea811503d8fbe25f91c8599e85e5
You're receiving this email because of your account on salsa.debian.org.


_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to