Adrian Bunk pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b5101f27 by Adrian Bunk at 2024-03-11T19:24:58+02:00
Reserve DLA-3759-1 for qemu
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -25234,7 +25234,6 @@ CVE-2023-5088 (A bug in QEMU could cause a guest I/O
operation otherwise address
- qemu 1:8.1.1+ds-2
[bookworm] - qemu <no-dsa> (Minor issue)
[bullseye] - qemu <no-dsa> (Minor issue)
- [buster] - qemu <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2247283
NOTE: Fixed by:
https://gitlab.com/qemu-project/qemu/-/commit/7d7512019fc40c577e2bdd61f114f31a9eb84a8e
(v8.2.0-rc0)
CVE-2023-4769 (A SSRF vulnerability has been found in ManageEngine Desktop
Central af ...)
@@ -44697,7 +44696,6 @@ CVE-2023-3354 (A flaw was found in the QEMU built-in
VNC server. When a client c
- qemu 1:8.0.4+dfsg-1
[bookworm] - qemu 1:7.2+dfsg-7+deb12u2
[bullseye] - qemu 1:5.2+dfsg-11+deb11u3
- [buster] - qemu <no-dsa> (Minor issue)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2216478
NOTE:
https://lists.nongnu.org/archive/html/qemu-devel/2023-07/msg01014.html
NOTE: Fixed by:
https://gitlab.com/qemu-project/qemu/-/commit/5300472ec0990c61742d89b5eea1c1e6941f6d62
(v8.0.4)
@@ -44759,7 +44757,6 @@ CVE-2023-2861 (A flaw was found in the 9p passthrough
filesystem (9pfs) implemen
- qemu 1:8.0.3+dfsg-1
[bookworm] - qemu 1:7.2+dfsg-7+deb12u1
[bullseye] - qemu <ignored> (Minor issue)
- [buster] - qemu <no-dsa> (Minor issue)
NOTE:
https://gitlab.com/qemu-project/qemu/-/commit/f6b0de53fb87ddefed348a39284c8e2f28dc4eda
CVE-2023-2860 (An out-of-bounds read vulnerability was found in the SR-IPv6
implement ...)
- linux 5.19.11-1
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[11 Mar 2024] DLA-3759-1 qemu - security update
+ {CVE-2023-2861 CVE-2023-3354 CVE-2023-5088}
+ [buster] - qemu 1:3.1+dfsg-8+deb10u12
[11 Mar 2024] DLA-3758-1 tiff - security update
{CVE-2023-3576 CVE-2023-52356}
[buster] - tiff 4.1.0+git191117-2~deb10u9
=====================================
data/dla-needed.txt
=====================================
@@ -192,10 +192,6 @@ python-asyncssh
NOTE: 20240116: Added by Front-Desk (lamby)
NOTE: 20240131: Patch for CVE-2023-46445 and CVE-2023-46446 backported and
in Git, but one test is failing. Waiting for feedback before release. (dleidert)
--
-qemu (Adrian Bunk)
- NOTE: 20240119: Added by Front-Desk (lamby)
- NOTE: 20240119: CVE-2023-1544 and CVE-2023-3354 already fixed in bullseye
via DSA or point releases; to be fixed or <ignored>. (lamby)
---
rails
NOTE: 20220909: Re-added due to regression (abhijith)
NOTE: 20220909: Regression on 2:5.2.2.1+dfsg-1+deb10u4 (abhijith)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b5101f27748259296b9cc0077f40d74821330c82
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b5101f27748259296b9cc0077f40d74821330c82
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
