Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
758a51cd by Salvatore Bonaccorso at 2021-03-08T05:30:55+01:00
Sync some linux CVEs with kernel-sec
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2433,6 +2433,7 @@ CVE-2021-26935
RESERVED
CVE-2021-26934 (An issue was discovered in the Linux kernel 4.18 through
5.10.16, as u ...)
- linux <unfixed> (unimportant)
+ [stretch] - linux <not-affected> (Vulnerable code not present)
NOTE: https://xenbits.xen.org/xsa/advisory-363.html
NOTE: Driver never was meant to be supported and the patch in src:xen
will only
NOTE: update SUPPORT.md to explicitly document the fact.
@@ -3933,6 +3934,7 @@ CVE-2021-3345 (_gcry_md_block_write in
cipher/hash-common.c in Libgcrypt version
NOTE: Fixed by:
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git;a=commit;h=512c0c75276949f13b6373b5c04f7065af750b08
CVE-2021-3348 (nbd_add_socket in drivers/block/nbd.c in the Linux kernel
through 5.10 ...)
- linux 5.10.13-1
+ [stretch] - linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/b98e762e3d71e893b221f871825dc64694cfb258 (5.11-rc6)
CVE-2021-3347 (An issue was discovered in the Linux kernel through 5.10.11. PI
futexe ...)
{DSA-4843-1 DLA-2557-1}
@@ -31827,7 +31829,9 @@ CVE-2020-27067 (In the l2tp subsystem, there is a
possible use after free due to
- linux 4.15.4-1
[stretch] - linux 4.9.228-1
CVE-2020-27066 (In xfrm6_tunnel_free_spi of net/ipv6/xfrm6_tunnel.c, there is
a possib ...)
- - linux <undetermined>
+ - linux 5.5.17-1
+ [buster] - linux 4.19.118-1
+ [stretch] - linux 4.9.228-1
NOTE: https://source.android.com/security/bulletin/pixel/2020-12-01
CVE-2020-27065
RESERVED
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/758a51cd5ca4281aa7a96c7060b1c78334ec394e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/758a51cd5ca4281aa7a96c7060b1c78334ec394e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
