GNU bug report logs - #47143
pjproject package is vulnerable to CVE-2021-21375 and CVE-2020-15260

Previous Next

Package: guix;

Reported by: Mark H Weaver <mhw <at> netris.org>

Date: Sun, 14 Mar 2021 21:38:02 UTC

Severity: normal

Tags: security

Done: Léo Le Bouter <lle-bout <at> zaclys.net>

Bug is archived. No further changes may be made.

Full log

Message #14 received at 47143-done <at> debbugs.gnu.org (full text, mbox):

From: Léo Le Bouter <lle-bout <at> zaclys.net>
To: 47143-done <at> debbugs.gnu.org
Subject: pjproject package is vulnerable to CVE-2021-21375 and CVE-2020-15260
Date: Mon, 05 Apr 2021 23:01:17 +0200

[Message part 1 (text/plain, inline)]
upstream released 2.11 which fixed the issue.

Update to 2.11 pushed as 45136b3673bcdba21fa0d1fd6edb3d388a645fcc

[signature.asc (application/pgp-signature, inline)]
This bug report was last modified 4 years and 48 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.