Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
7f05595c by Salvatore Bonaccorso at 2020-07-26T10:07:00+02:00
Track fixed CVEs for linux via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -340,7 +340,7 @@ CVE-2019-20910 (An issue was discovered in GNU LibreDWG
through 0.9.3. Crafted i
CVE-2019-20909 (An issue was discovered in GNU LibreDWG through 0.9.3. There
is a NULL ...)
- libredwg <itp> (bug #595191)
CVE-2020-15852 (An issue was discovered in the Linux kernel 5.5 through 5.7.9,
as used ...)
- - linux <unfixed>
+ - linux 5.7.10-1
[buster] - linux <not-affected> (Only affects 5.5 and later)
[stretch] - linux <not-affected> (Only affects 5.5 and later)
NOTE: https://www.openwall.com/lists/oss-security/2020/07/16/1
@@ -387,7 +387,7 @@ CVE-2020-15781
CVE-2020-15779 (A Path Traversal issue was discovered in the socket.io-file
package th ...)
NOT-FOR-US: Node socket.io-file
CVE-2020-15780 (An issue was discovered in drivers/acpi/acpi_configfs.c in the
Linux k ...)
- - linux <unfixed>
+ - linux 5.7.10-1
NOTE: https://www.openwall.com/lists/oss-security/2020/06/15/3
NOTE: Fixed by:
https://git.kernel.org/linus/75b0cea7bf307f362057cc778efe89af4c615354
CVE-2020-15778 (scp in OpenSSH through 8.3p1 allows command injection in scp.c
remote ...)
@@ -1300,7 +1300,7 @@ CVE-2017-18922 (It was discovered that websockets.c in
LibVNCServer prior to 0.9
NOTE:
https://github.com/LibVNC/libvncserver/commit/aac95a9dcf4bbba87b76c72706c3221a842ca433
NOTE: https://www.openwall.com/lists/oss-security/2020/06/30/2
CVE-2020-15393 (In the Linux kernel through 5.7.6, usbtest_disconnect in
drivers/usb/m ...)
- - linux <unfixed>
+ - linux 5.7.10-1
NOTE:
https://git.kernel.org/linus/28ebeb8db77035e058a510ce9bd17c2b9a009dba
CVE-2020-15392 (A user enumeration vulnerability flaw was found in Venki
Supravizio BP ...)
NOT-FOR-US: Venki
@@ -14304,7 +14304,7 @@ CVE-2020-10782 (An exposure of sensitive information
flaw was found in Ansible v
NOT-FOR-US: Ansible Tower
CVE-2020-10781 [zram sysfs resource consumption]
RESERVED
- - linux <unfixed>
+ - linux 5.7.10-1
[stretch] - linux <not-affected> (Vulnerable code introduced later)
[jessie] - linux <not-affected> (Vulnerable code introduced later)
NOTE: https://www.openwall.com/lists/oss-security/2020/06/18/1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7f05595c5a03c10de207bd229b59a742ab10fa54
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7f05595c5a03c10de207bd229b59a742ab10fa54
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
