From a2cdeee6a46dc7fe6150a42b44989e57185a2095 Mon Sep 17 00:00:00 2001 From: Salvatore Bonaccorso Date: Mon, 29 Nov 2021 17:01:21 +0100 Subject: Add back not-affected status for CVE-2021-43396 --- data/CVE/2021.list | 2 ++ 1 file changed, 2 insertions(+) diff --git a/data/CVE/2021.list b/data/CVE/2021.list index 3dc0abecae..c708d7d25b 100644 --- a/data/CVE/2021.list +++ b/data/CVE/2021.list @@ -2032,6 +2032,8 @@ CVE-2021-43392 RESERVED CVE-2021-43396 (** DISPUTED ** In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka ...) - glibc (unimportant; bug #998622) + [buster] - glibc (Vulnerable code not present) + [stretch] - glibc (Vulnerable code not present) NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=28524 NOTE: Fixed by: https://sourceware.org/git/?p=glibc.git;a=commit;h=ff012870b2c02a62598c04daa1e54632e020fd7d NOTE: Introduced by the fix for CVE-2021-3326 / BZ#27256: https://sourceware.org/git/?p=glibc.git;a=commit;h=7d88c6142c6efc160c0ee5e4f85cde382c072888 -- cgit v1.2.3