From fe1a20f9ad3e2484a96721b76132babf4e447639 Mon Sep 17 00:00:00 2001 From: Thorsten Alteholz Date: Thu, 25 Nov 2021 23:23:50 +0100 Subject: mark CVE-2020-16154 as no-dsa for Stretch --- data/CVE/2020.list | 1 + 1 file changed, 1 insertion(+) (limited to 'data/CVE/2020.list') diff --git a/data/CVE/2020.list b/data/CVE/2020.list index 9d64d4c27b..13691b87de 100644 --- a/data/CVE/2020.list +++ b/data/CVE/2020.list @@ -33722,6 +33722,7 @@ CVE-2020-16155 [does not uniquely define signed data] - libcpan-checksums-perl [bullseye] - libcpan-checksums-perl (Minor issue) [buster] - libcpan-checksums-perl (Minor issue) + [stretch] - libcpan-checksums-perl (Minor issue) NOTE: https://blog.hackeriet.no/cpan-signature-verification-vulnerabilities/ NOTE: http://blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html CVE-2020-16154 [Signature Verification Bypass] -- cgit v1.2.3