summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2021-12-02 22:10:05 +0100
committerSalvatore Bonaccorso <carnil@debian.org>2021-12-02 22:10:05 +0100
commit17a45edd6bc0f901ed51876d4407d40dd528c28d (patch)
tree58802a9669beb8e6a08b3bd25097bbeb9bd8df96
parent22e2e62ff889326613f81114049816aef2e558d7 (diff)
Add CVE-2021-41039/mosquitto
-rw-r--r--data/CVE/2021.list6
1 files changed, 5 insertions, 1 deletions
diff --git a/data/CVE/2021.list b/data/CVE/2021.list
index 36215dc018..2b978b5e4e 100644
--- a/data/CVE/2021.list
+++ b/data/CVE/2021.list
@@ -8158,7 +8158,11 @@ CVE-2021-41041
CVE-2021-41040
RESERVED
CVE-2021-41039 (In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client conn ...)
- TODO: check
+ - mosquitto <unfixed>
+ [buster] - mosquitto <not-affected> (Vulnerable code introduced later)
+ [stretch] - mosquitto <not-affected> (Vulnerable code introduced later)
+ NOTE: https://bugs.eclipse.org/bugs/show_bug.cgi?id=575314
+ NOTE: Proposed fix: https://bugzillaattachments.eclipsecontent.org/bugs/attachment.cgi?id=286914
CVE-2021-41038 (In versions of the @theia/plugin-ext component of Eclipse Theia prior ...)
NOT-FOR-US: Eclipse Theia
CVE-2021-41037

© 2014-2022 Faster IT GmbH | imprint | privacy policy