Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
101053be by Salvatore Bonaccorso at 2018-11-02T03:57:16Z
Add informatin on CVE-2018-5407

https://www.openwall.com/lists/oss-security/2018/11/01/4

This is auctually similar to other issues this year a hardware issue.

Still check if we want to track specific software particularly affected
as vulnerable software here.

For this reason kept the TODO question for now until decided on move.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -36049,8 +36049,12 @@ CVE-2018-5409
        RESERVED
 CVE-2018-5408
        RESERVED
-CVE-2018-5407
+CVE-2018-5407 [new side-channel vulnerability on SMT/Hyper-Threading 
architectures]
        RESERVED
+       NOTE: https://www.openwall.com/lists/oss-security/2018/11/01/4
+       NOTE: This is not an issue in software but in a hardware issue. Issue 
can be
+       NOTE: mitigated e.g. for OpenSSL.
+       TODO: check if we want track specific software as "affected"
 CVE-2018-5406
        RESERVED
 CVE-2018-5405



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/101053bef77c64aa566c92efed318ff376a16886

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/101053bef77c64aa566c92efed318ff376a16886
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits

Reply via email to