Bug#1003795: buster-pu: package evolution-data-server/3.30.5-1+deb10u2

Package: release.debian.org Severity: normal Tags: buster User: release.debian@packages.debian.org Usertags: pu * CVE-2020-16117: Crash on malformed server response with minimal capabilities. diff -Nru evolution-data-server-3.30.5/debian/changelog

Processed: php-horde-wicked: (autopkgtest) needs update for php8.1: Text_Wiki_Parse_Paragraph::process(): Argument #1 ($matches) must be passed by reference, value given

Processing control commands: > affects -1 src:php-defaults Bug #1003784 [src:php-horde-wicked] php-horde-wicked: (autopkgtest) needs update for php8.1: Text_Wiki_Parse_Paragraph::process(): Argument #1 ($matches) must be passed by reference, value given Added indication that 1003784 affects

Bug#1003765: bullseye-pu: package node-markdown-it/10.0.0+dfsg-2+deb11u1

On 15/01/2022 12:52, Yadd wrote: Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu [ Reason ] node-markdown-it is vulnerable to regex denial of service (CVE-2022-21670) [ Impact ] Little security issue [ Tests ] Test passed

Bug#1003765: bullseye-pu: package node-markdown-it/10.0.0+dfsg-2+deb11u1

Package: release.debian.org Severity: normal Tags: bullseye User: release.debian@packages.debian.org Usertags: pu [ Reason ] node-markdown-it is vulnerable to regex denial of service (CVE-2022-21670) [ Impact ] Little security issue [ Tests ] Test passed [ Risks ] Low risk, just a better