Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0c34911a by Salvatore Bonaccorso at 2019-10-14T08:13:42Z
Revisit severity for CVE-2019-3689/nfs-utils
It is completely right that the kernel hardening here does not help to
mitigate the issue.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -38884,7 +38884,9 @@ CVE-2019-3691
CVE-2019-3690
RESERVED
CVE-2019-3689 (The nfs-utils package in SUSE Linux Enterprise Server 12 before
and in ...)
- - nfs-utils <unfixed> (unimportant; bug #940848)
+ - nfs-utils <unfixed> (bug #940848)
+ [buster] - nfs-utils <no-dsa> (Minor issue)
+ [stretch] - nfs-utils <no-dsa> (Minor issue)
NOTE: https://bugzilla.suse.com/show_bug.cgi?id=1150733
NOTE: When adressing this a related patch to make statd take the
user-id from
NOTE: /var/lib/nfs/sm is needed, cf.
https://bugzilla.suse.com/show_bug.cgi?id=1150733#c3
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c34911abd2e3f813cb34169627b8ad8cce2a53c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c34911abd2e3f813cb34169627b8ad8cce2a53c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
