Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
edd08e57 by Salvatore Bonaccorso at 2018-04-25T19:25:04+02:00
Update status for various linux CVEs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -99,6 +99,7 @@ CVE-2018-10323 (The xfs_bmap_extents_to_btree function in
fs/xfs/libxfs/xfs_bmap
NOTE: https://bugzilla.kernel.org/show_bug.cgi?id=199423
CVE-2018-10322 (The xfs_dinode_verify function in
fs/xfs/libxfs/xfs_inode_buf.c in the ...)
- linux <unfixed>
+ [wheezy] - linux <ignored> (dinode verifier not implemented)
NOTE: https://bugzilla.kernel.org/show_bug.cgi?id=199377
CVE-2018-10321 (Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability
via ...)
NOT-FOR-US: Frog CMS
@@ -3767,8 +3768,9 @@ CVE-2018-8783
CVE-2018-8782
RESERVED
CVE-2018-8781 (The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the
Linux ...)
- - linux <unfixed>
+ - linux 4.15.17-1
NOTE: https://patchwork.freedesktop.org/patch/211845/
+ NOTE: Fixed by:
https://git.kernel.org/linus/3b82a4db8eaccce735dffd50b4d4e1578099b8e8
CVE-2018-8780 (In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4,
2.5.x ...)
{DLA-1359-1 DLA-1358-1}
- ruby2.5 2.5.1-1
@@ -25053,6 +25055,8 @@ CVE-2018-1109
CVE-2018-1108 [random: fix crng_ready() test]
RESERVED
- linux <unfixed>
+ [jessie] - linux <not-affected> (Vulnerable code not present)
+ [wheezy] - linux <not-affected> (Vulnerable code not present)
NOTE: Fixed by:
https://git.kernel.org/linus/43838a23a05fbd13e47d750d3dfd77001536dd33
CVE-2018-1107
RESERVED
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/edd08e576186f2045ed5cf993c177361a3fc8757
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/edd08e576186f2045ed5cf993c177361a3fc8757
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
