Bug#1050835: nuget: CVE-2023-29337

2023-09-28 Thread Bastian Germann
Control: fixed -1 nuget/2.8.7+md510+dhx1-1.1 You can see the fix for the oldest affected and supported product line at https://github.com/NuGet/NuGet.Client/commit/beea05411b6483ecfd8b1e4517c3dc4659bb6ac0 The affected code entered a year ago at

Bug#1050835: nuget: CVE-2023-29337

2023-08-29 Thread Moritz Mühlenhoff
Source: nuget X-Debbugs-CC: t...@security.debian.org Severity: grave Tags: security Hi, The following vulnerability was published for nuget. CVE-2023-29337[0]: Does https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29337 affect nuget as packaged in Debian? If you fix the