Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
bbe08c52 by Salvatore Bonaccorso at 2022-08-15T20:04:42+02:00
Track fixed version for CVE-2022-21505/linux already (exceptionally)
It won't be named in the DSA. OTOH for unstable it is *not* unimportant
as we have CONFIG_IMA set. But for bullseye this is not the case yet.
Still it will be fixed at source level.
- - - - -
793a3463 by Salvatore Bonaccorso at 2022-08-15T20:19:25+02:00
Mark libengine-gost-openssl1.1 as removed
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -24251,7 +24251,7 @@ CVE-2022-29244 (npm pack ignores root-level .gitignore
and .npmignore file exclu
CVE-2022-29243 (Nextcloud Server is the file server software for Nextcloud, a
self-hos ...)
- nextcloud-server <itp> (bug #941708)
CVE-2022-29242 (GOST engine is a reference implementation of the Russian GOST
crypto a ...)
- - libengine-gost-openssl1.1 <unfixed> (bug #1012512)
+ - libengine-gost-openssl1.1 <removed> (bug #1012512)
[bullseye] - libengine-gost-openssl1.1 <no-dsa> (Minor issue)
[buster] - libengine-gost-openssl1.1 <no-dsa> (Minor issue)
- libengine-gost-openssl <not-affected> (Fixed with initial upload to
the archive)
@@ -54860,6 +54860,7 @@ CVE-2022-21506
CVE-2022-21505
RESERVED
- linux 5.18.16-1
+ [bullseye] - linux 5.10.136-1
[buster] - linux <not-affected> (Vulnerable code introduced later)
NOTE: https://www.openwall.com/lists/oss-security/2022/07/19/4
NOTE:
https://git.kernel.org/linus/543ce63b664e2c2f9533d089a4664b559c3e6b5b
(v5.19-rc8)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/a3d9fcadeef2e7063ca66cf746840025a07621cf...793a34630925d1b6c0b57a50383d15d724945d0d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/a3d9fcadeef2e7063ca66cf746840025a07621cf...793a34630925d1b6c0b57a50383d15d724945d0d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
