Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
20016960 by Salvatore Bonaccorso at 2025-08-10T13:58:19+02:00
Mark CVE-2025-40918 as no-dsa for trixie
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -6183,6 +6183,7 @@ CVE-2025-40777 (If a `named` caching resolver is
configured with `serve-stale-en
NOTE: Fixed by:
https://gitlab.isc.org/isc-projects/bind9/-/commit/9c7a63142dacb2e16c64719f57d1191298af4393
(v9.20.11)
CVE-2025-40918 (Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800
for Perl g ...)
- libauthen-sasl-perl <unfixed> (bug #1109406)
+ [trixie] - libauthen-sasl-perl <no-dsa> (Minor issue)
[bookworm] - libauthen-sasl-perl <no-dsa> (Minor issue)
[bullseye] - libauthen-sasl-perl <postponed> (Minor issue, weak entropy
for historic DIGEST-MD5 mech)
NOTE: https://lists.security.metacpan.org/cve-announce/msg/31224910/
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/200169608acfc01252139a1c599a4249f92273e3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/200169608acfc01252139a1c599a4249f92273e3
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits