Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6717fad5 by Moritz Muehlenhoff at 2020-09-18T11:16:18+02:00
qemu bugs / postponed
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -279,11 +279,14 @@ CVE-2020-25626
RESERVED
CVE-2020-25625 [usb: hcd-ohci: infinite loop issue while processing transfer
descriptors]
RESERVED
- - qemu <unfixed>
+ - qemu <unfixed> (bug #970542)
+ [buster] - qemu <postponed> (Can be fixed along in next qemu DSA)
NOTE:
https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05905.html
+ NOTE: https://www.openwall.com/lists/oss-security/2020/09/17/1
CVE-2020-25624 [hcd-ohci: out-of-bound access issue while processing transfer
descriptors]
RESERVED
- - qemu <unfixed>
+ - qemu <unfixed> (bug #970541)
+ [buster] - qemu <postponed> (Can be fixed along in next qemu DSA)
NOTE:
https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg05492.html
CVE-2020-25623
RESERVED
@@ -1435,14 +1438,19 @@ CVE-2020-25086 (Ecommerce-CodeIgniter-Bootstrap before
2020-08-03 allows XSS in
NOT-FOR-US: Ecommerce-CodeIgniter-Bootstrap
CVE-2020-25085 [sdhci: out-of-bounds access issue while doing multi block SDMA]
RESERVED
- - qemu <unfixed>
+ - qemu <unfixed> (bug #970540)
+ [buster] - qemu <postponed> (Can be fixed along in next qemu DSA)
NOTE:
https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg00733.html
NOTE:
https://lists.nongnu.org/archive/html/qemu-devel/2020-09/msg01439.html
+ NOTE: https://www.openwall.com/lists/oss-security/2020/09/16/6
CVE-2020-25084 [usb: use-after-free issue while setting up packet]
RESERVED
- - qemu <unfixed>
+ - qemu <unfixed> (bug #970539)
+ [buster] - qemu <postponed> (Can be fixed along in next qemu DSA)
NOTE:
https://lists.nongnu.org/archive/html/qemu-devel/2020-08/msg08050.html
NOTE:
https://lists.nongnu.org/archive/html/qemu-devel/2020-08/msg08043.html
+ NOTE: https://www.openwall.com/lists/oss-security/2020/09/16/5
+ NOTE:
https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Fxhci_uaf_2
CVE-2020-25083
RESERVED
CVE-2020-25082
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6717fad55c4449722dae4546fcf8190c1f7d572f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6717fad55c4449722dae4546fcf8190c1f7d572f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
