[Git][security-tracker-team/security-tracker][master] 2 commits: CVE-2019-10222/ceph: Track status for buster and stretch

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
31985e36 by Salvatore Bonaccorso at 2019-08-29T05:22:30Z
CVE-2019-10222/ceph: Track status for buster and stretch

- - - - -
830ce151 by Salvatore Bonaccorso at 2019-08-29T05:22:57Z
CVE-2019-10222: Add refernce to commit merging ceph/pull/29967

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -16098,8 +16098,11 @@ CVE-2019-10223
 CVE-2019-10222 [unauthenticated clients can crash RGW]
 	RESERVED
 	- ceph <unfixed>
+	[buster] - ceph <no-dsa> (Minor issue; only triggerable if experimental feature enabled)
+	[stretch] - ceph <not-affected> (Vulnerable code not present)
 	NOTE: https://www.openwall.com/lists/oss-security/2019/08/28/9
 	NOTE: https://github.com/ceph/ceph/pull/29967
+	NOTE: https://github.com/ceph/ceph/commit/6171399fdedd928b4249d135b4036e3de25079aa
 	NOTE: 12.2.x installations only affected by the vulnerability if experimental
 	NOTE: features are enabled.
 CVE-2019-10221



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/8a266217a5aa2ba950f7ccb4c75d1dfc1ad32fa6...830ce151646f5f770b86d73984bf4a4c2555695a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/8a266217a5aa2ba950f7ccb4c75d1dfc1ad32fa6...830ce151646f5f770b86d73984bf4a4c2555695a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190829/fa12631a/attachment.html>