[Git][security-tracker-team/security-tracker][master] Update status for CVE-2018-19406/linux

Salvatore Bonaccorso carnil at debian.org
Mon Dec 3 20:06:17 GMT 2018


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7607070f by Salvatore Bonaccorso at 2018-12-03T20:05:49Z
Update status for CVE-2018-19406/linux

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3649,8 +3649,10 @@ CVE-2018-19407 (The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux
 	- linux <unfixed>
 	NOTE: https://lkml.org/lkml/2018/11/20/580
 CVE-2018-19406 (kvm_pv_send_ipi in arch/x86/kvm/lapic.c in the Linux kernel through ...)
-	- linux <unfixed>
+	- linux <not-affected> (Vulnerable code introduced later)
 	NOTE: https://lkml.org/lkml/2018/11/20/411
+	NOTE: Introduced by: https://git.kernel.org/linus/4180bf1b655a791a0a6ef93a2ffffc762722c782 (4.19-rc1)
+	NOTE: Fixed by: https://git.kernel.org/linus/38ab012f109caf10f471db1adf284e620dd8d701 (4.20-rc5)
 CVE-2018-19405
 	RESERVED
 CVE-2018-19404 (In YXcms 1.4.7, protected/apps/appmanage/controller/indexController.php ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7607070f1138e229a340c929b63dcb8f0a82d764

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7607070f1138e229a340c929b63dcb8f0a82d764
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181203/9d0eb24d/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list