Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.security > #5217 > unrolled thread

Re: [Pkg-rust-maintainers] Processed: bugs

Started byXimin Luo <infinity0@debian.org>
First post2017-04-23 12:30 +0200
Last post2017-04-23 12:30 +0200
Articles 1 — 1 participant

Back to article view | Back to linux.debian.security

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.


Contents

  Re: [Pkg-rust-maintainers] Processed: bugs Ximin Luo <infinity0@debian.org> - 2017-04-23 12:30 +0200

#5217 — Re: [Pkg-rust-maintainers] Processed: bugs

FromXimin Luo <infinity0@debian.org>
Date2017-04-23 12:30 +0200
SubjectRe: [Pkg-rust-maintainers] Processed: bugs
Message-ID<tzmtb-6QE-7@gated-at.bofh.it>
retitle 860989 cargo: embeds a copy of libgit2 affected by CVE-2016-8568 CVE-2016-8569
retitle 860990 cargo: embeds a copy of libgit2 affected by CVE-2016-10128 CVE-2016-10129 CVE-2016-10130

Debian Bug Tracking System:
> Processing commands for control@bugs.debian.org:
> [..]

Note that this is fixed in experimental but not in testing/sid which still carries cargo 0.15 with a libgit2 "0.24 + 1" version, I didn't check exactly which one it was. All of the CVEs are fixed in 0.25.1, I believe.

https://sources.debian.net/src/cargo/0.15.0~dev-1/deps/libgit2-sys-0.6.2/libgit2/CHANGELOG.md/

X

-- 
GPG: ed25519/56034877E1F87C35
GPG: rsa4096/1318EFAC5FBBDBCE
https://github.com/infinity0/pubkeys.git

[toc] | [standalone]


Back to top | Article view | linux.debian.security


csiph-web