Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
21da85b9 by Salvatore Bonaccorso at 2023-10-07T11:48:18+02:00
Track fixed version for some linux issues fixed via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -669,7 +669,7 @@ CVE-2023-5346 (Type confusion in V8 in Google Chrome prior
to 117.0.5938.149 all
- chromium 117.0.5938.149-1
[buster] - chromium <end-of-life> (see DSA 5046)
CVE-2023-5345 (A use-after-free vulnerability in the Linux kernel's
fs/smb/client com ...)
- - linux <unfixed>
+ - linux 6.5.6-1
[bullseye] - linux <not-affected> (Vulnerable code not present)
[buster] - linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/e6e43b8aa7cd3c3af686caf0c2e11819a886d705
@@ -1888,7 +1888,7 @@ CVE-2023-43040 [Improperly verified POST keys]
- ceph <unfixed>
NOTE: https://www.openwall.com/lists/oss-security/2023/09/26/10
CVE-2023-5197 (A use-after-free vulnerability in the Linux kernel's netfilter:
nf_tab ...)
- - linux <unfixed>
+ - linux 6.5.6-1
[buster] - linux <not-affected> (Vulnerable code not present)
NOTE:
https://git.kernel.org/linus/f15f29fd4779be8a418b66e9d52979bb6d6c2325 (6.6-rc3)
NOTE: https://kernel.dance/f15f29fd4779be8a418b66e9d52979bb6d6c2325
@@ -2211,7 +2211,7 @@ CVE-2023-32284 (An out-of-bounds write vulnerability
exists in the tiff_planar_a
CVE-2022-48605 (Input verification vulnerability in the fingerprint module.
Successful ...)
NOT-FOR-US: Huawei
CVE-2023-42756 (A flaw was found in the Netfilter subsystem of the Linux
kernel. A rac ...)
- - linux <unfixed>
+ - linux 6.5.6-1
[bookworm] - linux 6.1.55-1
[buster] - linux <not-affected> (Vulnerable code not present)
NOTE: https://www.openwall.com/lists/oss-security/2023/09/27/2
@@ -2788,7 +2788,7 @@ CVE-2023-4237 (A flaw was found in the Ansible Automation
Platform. When creatin
[buster] - ansible <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2229979
CVE-2023-42754 (A NULL pointer dereference flaw was found in the Linux kernel
ipv4 sta ...)
- - linux <unfixed>
+ - linux 6.5.6-1
[bookworm] - linux 6.1.55-1
NOTE: https://www.openwall.com/lists/oss-security/2023/10/02/8
NOTE:
https://git.kernel.org/linus/0113d9c9d1ccc07f5a3710dac4aa24b6d711278c (6.6-rc3)
@@ -3429,7 +3429,7 @@ CVE-2023-4527 (A flaw was found in glibc. When the
getaddrinfo function is calle
NOTE: Fixed by:
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=b25508dd774b617f99419bdc3cf2ace4560cd2d6
(release/2.38/master branch)
NOTE: https://www.openwall.com/lists/oss-security/2023/09/25/1
CVE-2023-4921 (A use-after-free vulnerability in the Linux kernel's net/sched:
sch_qf ...)
- - linux <unfixed>
+ - linux 6.5.6-1
[bookworm] - linux 6.1.55-1
NOTE: https://kernel.dance/#8fc134fee27f2263988ae38920bc03da416b03d8
NOTE:
https://git.kernel.org/linus/8fc134fee27f2263988ae38920bc03da416b03d8 (6.6-rc1)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/21da85b9767cbd71ff6a6cf6fdc7145424168a5e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/21da85b9767cbd71ff6a6cf6fdc7145424168a5e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
