[Git][security-tracker-team/security-tracker][master] Update status for various linux CVEs

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
edd08e57 by Salvatore Bonaccorso at 2018-04-25T19:25:04+02:00
Update status for various linux CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -99,6 +99,7 @@ CVE-2018-10323 (The xfs_bmap_extents_to_btree function in fs/xfs/libxfs/xfs_bmap
 	NOTE: https://bugzilla.kernel.org/show_bug.cgi?id=199423
 CVE-2018-10322 (The xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the ...)
 	- linux <unfixed>
+	[wheezy] - linux <ignored> (dinode verifier not implemented)
 	NOTE: https://bugzilla.kernel.org/show_bug.cgi?id=199377
 CVE-2018-10321 (Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via ...)
 	NOT-FOR-US: Frog CMS
@@ -3767,8 +3768,9 @@ CVE-2018-8783
 CVE-2018-8782
 	RESERVED
 CVE-2018-8781 (The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux ...)
-	- linux <unfixed>
+	- linux 4.15.17-1
 	NOTE: https://patchwork.freedesktop.org/patch/211845/
+	NOTE: Fixed by: https://git.kernel.org/linus/3b82a4db8eaccce735dffd50b4d4e1578099b8e8
 CVE-2018-8780 (In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x ...)
 	{DLA-1359-1 DLA-1358-1}
 	- ruby2.5 2.5.1-1
@@ -25053,6 +25055,8 @@ CVE-2018-1109
 CVE-2018-1108 [random: fix crng_ready() test]
 	RESERVED
 	- linux <unfixed>
+	[jessie] - linux <not-affected> (Vulnerable code not present)
+	[wheezy] - linux <not-affected> (Vulnerable code not present)
 	NOTE: Fixed by: https://git.kernel.org/linus/43838a23a05fbd13e47d750d3dfd77001536dd33
 CVE-2018-1107
 	RESERVED



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/edd08e576186f2045ed5cf993c177361a3fc8757

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/edd08e576186f2045ed5cf993c177361a3fc8757
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180425/9b886880/attachment-0001.html>