Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker
Commits: 54c88abf by Thorsten Alteholz at 2020-08-26T14:48:05+02:00 mark CVE-2020-13132 and CVE-2020-13131 as not-affected in Stretch - - - - - e8bbe9ac by Thorsten Alteholz at 2020-08-26T14:49:50+02:00 CVEs of yubico-piv-tool do not affect Stretch - - - - - 2 changed files: - data/CVE/list - data/dla-needed.txt Changes: ===================================== data/CVE/list ===================================== @@ -24900,10 +24900,12 @@ CVE-2020-13133 RESERVED CVE-2020-13132 (An issue was discovered in Yubico libykpiv before 2.1.0. An attacker c ...) - yubico-piv-tool <unfixed> + [stretch] - yubico-piv-tool <not-affected> (Vulnerable code not present) NOTE: https://www.yubico.com/support/security-advisories/ysa-2020-02/ NOTE: https://blog.inhq.net/posts/yubico-libykpiv-vuln/ CVE-2020-13131 (An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in ...) - yubico-piv-tool <unfixed> + [stretch] - yubico-piv-tool <not-affected> (Vulnerable code not present) NOTE: https://blog.inhq.net/posts/yubico-libykpiv-vuln/ CVE-2020-13143 (gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linu ...) {DSA-4699-1 DSA-4698-1 DLA-2242-1 DLA-2241-1} ===================================== data/dla-needed.txt ===================================== @@ -212,7 +212,3 @@ xcftools NOTE: 20200523: Proposed fix https://github.com/j-jorge/xcftools/pull/15 (gladk) NOTE: 20200605: Patch https://salsa.debian.org/lts-team/packages/xcftools/-/blob/fix/test-CVE-2019-5087/debian/patches/CVE-2019-5087.patch (gladk) -- -yubico-piv-tool (Thorsten Alteholz) - NOTE: 20200815: About CVE-2020-13131. Blog post available, but patch URLs seemingly not provided. - NOTE: 20200815: Needs deeper research. (sunweaver) --- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/b9965ae00f1823e18c584873bd67812049e5c335...e8bbe9ac1bd6de0a217a8cc3f5daf0adea31e1ae -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/b9965ae00f1823e18c584873bd67812049e5c335...e8bbe9ac1bd6de0a217a8cc3f5daf0adea31e1ae You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits