Sean Whitton pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
eb2addd9 by Sean Whitton at 2023-10-05T16:53:18+01:00
Reserve DLA-3604-1 for qemu
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -8878,7 +8878,6 @@ CVE-2023-3180 (A flaw was found in the QEMU virtual
crypto device while handling
- qemu 1:8.0.4+dfsg-1
[bookworm] - qemu <no-dsa> (Minor issue)
[bullseye] - qemu <no-dsa> (Minor issue)
- [buster] - qemu <postponed> (Minor issue)
NOTE: Introduced by:
https://gitlab.com/qemu-project/qemu/-/commit/04b9b37edda85964cca033a48dcc0298036782f2
(v2.8.0-rc0)
NOTE: Fixed by:
https://gitlab.com/qemu-project/qemu/-/commit/9d38a8434721a6479fe03fb5afb150ca793d3980
(master)
NOTE: Fixed by:
https://gitlab.com/qemu-project/qemu/-/commit/49f1e02bac166821c712534aaa775f50e1afe17f
(v8.0.4)
@@ -42622,7 +42621,6 @@ CVE-2023-0330 (A vulnerability in the lsi53c895a device
affects the latest versi
- qemu 1:8.0.2+dfsg-1 (bug #1029155)
[bookworm] - qemu 1:7.2+dfsg-7+deb12u1
[bullseye] - qemu <no-dsa> (Minor issue)
- [buster] - qemu <postponed> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2160151
NOTE: Proposed patch:
https://lists.nongnu.org/archive/html/qemu-devel/2023-01/msg03411.html
NOTE: Fixed by:
https://gitlab.com/qemu-project/qemu/-/commit/e49884a90987744ddb54b2fadc770633eb6a4d62
(v8.0.1)
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[05 Oct 2023] DLA-3604-1 qemu - security update
+ {CVE-2020-24165 CVE-2023-0330 CVE-2023-3180}
+ [buster] - qemu 1:3.1+dfsg-8+deb10u11
[05 Oct 2023] DLA-3603-1 libxpm - security update
{CVE-2023-43786 CVE-2023-43787 CVE-2023-43788 CVE-2023-43789}
[buster] - libxpm 1:3.5.12-1+deb10u2
=====================================
data/dla-needed.txt
=====================================
@@ -157,10 +157,6 @@ python-os-brick
python3.7
NOTE: 20231003: Added by Front-Desk (Beuc)
--
-qemu (Sean Whitton)
- NOTE: 20230924: Added by Front-Desk (apo)
- NOTE: 20230924: Consider fixing postponed issues as well. (apo)
---
rails
NOTE: 20220909: Re-added due to regression (abhijith)
NOTE: 20220909: Regression on 2:5.2.2.1+dfsg-1+deb10u4 (abhijith)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eb2addd983904718c33aeb2113278ee44f0f7740
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eb2addd983904718c33aeb2113278ee44f0f7740
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
