Thorsten Alteholz pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
54c88abf by Thorsten Alteholz at 2020-08-26T14:48:05+02:00
mark CVE-2020-13132 and CVE-2020-13131 as not-affected in Stretch
- - - - -
e8bbe9ac by Thorsten Alteholz at 2020-08-26T14:49:50+02:00
CVEs of yubico-piv-tool do not affect Stretch
- - - - -
2 changed files:
- data/CVE/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -24900,10 +24900,12 @@ CVE-2020-13133
RESERVED
CVE-2020-13132 (An issue was discovered in Yubico libykpiv before 2.1.0. An
attacker c ...)
- yubico-piv-tool <unfixed>
+ [stretch] - yubico-piv-tool <not-affected> (Vulnerable code not present)
NOTE: https://www.yubico.com/support/security-advisories/ysa-2020-02/
NOTE: https://blog.inhq.net/posts/yubico-libykpiv-vuln/
CVE-2020-13131 (An issue was discovered in Yubico libykpiv before 2.1.0.
lib/util.c in ...)
- yubico-piv-tool <unfixed>
+ [stretch] - yubico-piv-tool <not-affected> (Vulnerable code not present)
NOTE: https://blog.inhq.net/posts/yubico-libykpiv-vuln/
CVE-2020-13143 (gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in
the Linu ...)
{DSA-4699-1 DSA-4698-1 DLA-2242-1 DLA-2241-1}
=====================================
data/dla-needed.txt
=====================================
@@ -212,7 +212,3 @@ xcftools
NOTE: 20200523: Proposed fix https://github.com/j-jorge/xcftools/pull/15
(gladk)
NOTE: 20200605: Patch
https://salsa.debian.org/lts-team/packages/xcftools/-/blob/fix/test-CVE-2019-5087/debian/patches/CVE-2019-5087.patch
(gladk)
--
-yubico-piv-tool (Thorsten Alteholz)
- NOTE: 20200815: About CVE-2020-13131. Blog post available, but patch URLs
seemingly not provided.
- NOTE: 20200815: Needs deeper research. (sunweaver)
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/b9965ae00f1823e18c584873bd67812049e5c335...e8bbe9ac1bd6de0a217a8cc3f5daf0adea31e1ae
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/b9965ae00f1823e18c584873bd67812049e5c335...e8bbe9ac1bd6de0a217a8cc3f5daf0adea31e1ae
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
