Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7c891b2c by Salvatore Bonaccorso at 2019-12-06T13:19:20Z
Update CVE-2019-19317 for up to unstable version
Initial (experimental) code for genrated column support was only
introduced in master development branch and not present on the
branch-3.30 branch. Feature targeted at future 3.31.0 version.
Thanks: Sylvain Beucler for initial triage up to buster.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2284,12 +2284,9 @@ CVE-2019-19319 (In the Linux kernel 5.0.21, a setxattr
operation, after a mount
CVE-2019-19318 (In the Linux kernel 5.3.11, mounting a crafted btrfs image
twice can c ...)
- linux <unfixed>
CVE-2019-19317 (lookupName in resolve.c in SQLite 3.30.1 omits bits from the
colUsed b ...)
- - sqlite3 <unfixed>
- [buster] - sqlite3 <not-affected> (Generated column support was added
with SQLite version 3.31.0)
- [stretch] - sqlite3 <not-affected> (Generated column support was added
with SQLite version 3.31.0)
- [jessie] - sqlite3 <not-affected> (Generated column support was added
with SQLite version 3.31.0)
- NOTE:
https://github.com/sqlite/sqlite/commit/522ebfa7cee96fb325a22ea3a2464a63485886a8
- NOTE:
https://github.com/sqlite/sqlite/commit/73bacb7f93eab9f4bd5a65cbc4ae242acf63c9e3
+ - sqlite3 <not-affected> (Generated column support was added with
SQLite version 3.31.0)
+ NOTE: Fixed by:
https://github.com/sqlite/sqlite/commit/522ebfa7cee96fb325a22ea3a2464a63485886a8
+ NOTE: Additional testcases:
https://github.com/sqlite/sqlite/commit/73bacb7f93eab9f4bd5a65cbc4ae242acf63c9e3
CVE-2019-19316 (When using the Azure backend with a shared access signature
(SAS), Ter ...)
NOT-FOR-US: Terraform
CVE-2019-19315
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/7c891b2cdd126254b018f46fabe763048a527741
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/7c891b2cdd126254b018f46fabe763048a527741
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
