Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
177f85e3 by Salvatore Bonaccorso at 2020-01-02T16:03:37+01:00
Add Debian bug reference for xen issues
Decided to fill one bug for all the CVEs although there might be not
overlapping affected versions.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -8065,25 +8065,25 @@ CVE-2019-19585
CVE-2019-19584
RESERVED
CVE-2019-19583 (An issue was discovered in Xen through 4.12.x allowing x86
HVM/PVH gue ...)
- - xen <unfixed>
+ - xen <unfixed> (bug #947944)
NOTE: https://xenbits.xen.org/xsa/advisory-308.html
CVE-2019-19582 (An issue was discovered in Xen through 4.12.x allowing x86
guest OS us ...)
- - xen <unfixed>
+ - xen <unfixed> (bug #947944)
NOTE: https://xenbits.xen.org/xsa/advisory-307.html
CVE-2019-19581 (An issue was discovered in Xen through 4.12.x allowing 32-bit
Arm gues ...)
- - xen <unfixed>
+ - xen <unfixed> (bug #947944)
NOTE: https://xenbits.xen.org/xsa/advisory-307.html
CVE-2019-19580 (An issue was discovered in Xen through 4.12.x allowing x86 PV
guest OS ...)
- - xen <unfixed>
+ - xen <unfixed> (bug #947944)
NOTE: https://xenbits.xen.org/xsa/advisory-310.html
CVE-2019-19578 (An issue was discovered in Xen through 4.12.x allowing x86 PV
guest OS ...)
- - xen <unfixed>
+ - xen <unfixed> (bug #947944)
NOTE: https://xenbits.xen.org/xsa/advisory-309.html
CVE-2019-19577 (An issue was discovered in Xen through 4.12.x allowing x86 AMD
HVM gue ...)
- - xen <unfixed>
+ - xen <unfixed> (bug #947944)
NOTE: https://xenbits.xen.org/xsa/advisory-311.html
CVE-2019-19579 (An issue was discovered in Xen through 4.12.x allowing
attackers to ga ...)
- - xen <unfixed>
+ - xen <unfixed> (bug #947944)
NOTE: https://xenbits.xen.org/xsa/advisory-306.html
CVE-2019-19576 (class.upload.php in verot.net class.upload before 1.0.3 and
2.x before ...)
NOT-FOR-US: K2 extension for Joomla!
@@ -13903,22 +13903,22 @@ CVE-2019-18427
CVE-2019-18426
RESERVED
CVE-2019-18425 (An issue was discovered in Xen through 4.12.x allowing 32-bit
PV guest ...)
- - xen <unfixed>
+ - xen <unfixed> (bug #947944)
NOTE: https://xenbits.xen.org/xsa/advisory-298.html
CVE-2019-18424 (An issue was discovered in Xen through 4.12.x allowing
attackers to ga ...)
- - xen <unfixed>
+ - xen <unfixed> (bug #947944)
NOTE: https://xenbits.xen.org/xsa/advisory-302.html
CVE-2019-18423 (An issue was discovered in Xen through 4.12.x allowing ARM
guest OS us ...)
- - xen <unfixed>
+ - xen <unfixed> (bug #947944)
NOTE: https://xenbits.xen.org/xsa/advisory-301.html
CVE-2019-18422 (An issue was discovered in Xen through 4.12.x allowing ARM
guest OS us ...)
- - xen <unfixed>
+ - xen <unfixed> (bug #947944)
NOTE: https://xenbits.xen.org/xsa/advisory-303.html
CVE-2019-18421 (An issue was discovered in Xen through 4.12.x allowing x86 PV
guest OS ...)
- - xen <unfixed>
+ - xen <unfixed> (bug #947944)
NOTE: https://xenbits.xen.org/xsa/advisory-299.html
CVE-2019-18420 (An issue was discovered in Xen through 4.12.x allowing x86 PV
guest OS ...)
- - xen <unfixed>
+ - xen <unfixed> (bug #947944)
NOTE: https://xenbits.xen.org/xsa/advisory-296.html
CVE-2019-18419 (A cross-site scripting (XSS) vulnerability in index.php in
ClonOS WEB ...)
NOT-FOR-US: ClonOS
@@ -36652,7 +36652,7 @@ CVE-2019-11135 (TSX Asynchronous Abort condition on
some CPUs utilizing speculat
{DSA-4565-1 DSA-4564-1 DLA-2051-1 DLA-1990-1 DLA-1989-1}
- linux 5.3.9-2
- intel-microcode 3.20191112.1
- - xen <unfixed>
+ - xen <unfixed> (bug #947944)
NOTE:
https://software.intel.com/security-software-guidance/insights/deep-dive-intel-transactional-synchronization-extensions-intel-tsx-asynchronous-abort
NOTE: https://xenbits.xen.org/xsa/advisory-305.html
NOTE: The 3.20191112.1 release for intel-microcode did contain most
updates, additional
@@ -87408,7 +87408,7 @@ CVE-2018-12207 (Improper invalidation for page table
updates by a virtual guest
{DSA-4564-1 DLA-1990-1}
- linux 5.3.9-2
[jessie] - linux <ignored> (Untrusted guests are no longer supportable)
- - xen <unfixed>
+ - xen <unfixed> (bug #947944)
NOTE:
https://software.intel.com/security-software-guidance/insights/deep-dive-machine-check-error-avoidance-page-size-change-0
NOTE: https://xenbits.xen.org/xsa/advisory-304.html
CVE-2018-12206 (Improper configuration of hardware access in Intel QuickAssist
Technol ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/177f85e362aec203b9cab35e6ad8cec24dbf9ae4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/177f85e362aec203b9cab35e6ad8cec24dbf9ae4
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
