Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cd2abed4 by Salvatore Bonaccorso at 2021-01-25T20:05:22+01:00
Update information on xen issue XSA-360
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1062,9 +1062,12 @@ CVE-2019-25014
NOT-FOR-US: Istio
CVE-2021-XXXX [Xen: IRQ vector leak on x86]
- xen <unfixed>
- [buster] - xen <postponed> (Fix along in future update)
- [stretch] - xen <end-of-life> (DSA 4602-1)
+ [buster] - xen <not-affected> (Vulnerable code introduced later)
+ [stretch] - xen <not-affected> (Vulnerable code introduced later)
NOTE: https://xenbits.xen.org/xsa/advisory-360.html
+ NOTE: Introduced by:
https://xenbits.xen.org/gitweb/?p=xen.git;a=commit;h=5b58dad089880127674d460494d1a9d68109b3d7
(4.14.0-rc1)
+ NOTE: Issue backported to 4.12.3 and 4.13.1
+ NOTE: Fixed by:
https://xenbits.xen.org/gitweb/?p=xen.git;a=commit;h=58427889f5a420cc5226f88524b3228f90b72a58
CVE-2021-3189
RESERVED
CVE-2021-3188 (phpList 3.6.0 allows CSV injection, related to the email
parameter, an ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd2abed43e66e9de95a7c4397b39f6052719f341
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd2abed43e66e9de95a7c4397b39f6052719f341
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
