| Release | Version |
|---|---|
| jessie | 0.21.1-3 |
| stretch | 0.24.0-1.1 |
| buster | 0.31.0-4+deb10u2 |
| bullseye | 0.37.1-2 |
| bookworm | 0.38.0-4 |
| trixie | 0.42.0-2 |
| sid | 0.42.0-2 |
| Bug | jessie | stretch | buster | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-50781 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA, postponed) | vulnerable | vulnerable | A flaw was found in m2crypto. This issue may allow a remote attacker t ... |
| CVE-2020-25657 | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | A flaw was found in all released versions of m2crypto, where they are ... |
| Bug | jessie | stretch | buster | bullseye | bookworm | trixie | sid | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2009-0127 | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | M2Crypto does not properly check the return value from the OpenSSL EVP ... |