[Git][security-tracker-team/security-tracker][master] Update CVE-2019-19317 for up to unstable version

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7c891b2c by Salvatore Bonaccorso at 2019-12-06T13:19:20Z
Update CVE-2019-19317 for up to unstable version

Initial (experimental) code for genrated column support was only
introduced in master development branch and not present on the
branch-3.30 branch. Feature targeted at future 3.31.0 version.

Thanks: Sylvain Beucler for initial triage up to buster.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2284,12 +2284,9 @@ CVE-2019-19319 (In the Linux kernel 5.0.21, a setxattr operation, after a mount
 CVE-2019-19318 (In the Linux kernel 5.3.11, mounting a crafted btrfs image twice can c ...)
 	- linux <unfixed>
 CVE-2019-19317 (lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed b ...)
-	- sqlite3 <unfixed>
-	[buster] - sqlite3 <not-affected> (Generated column support was added with SQLite version 3.31.0)
-	[stretch] - sqlite3 <not-affected> (Generated column support was added with SQLite version 3.31.0)
-	[jessie] - sqlite3 <not-affected> (Generated column support was added with SQLite version 3.31.0)
-	NOTE: https://github.com/sqlite/sqlite/commit/522ebfa7cee96fb325a22ea3a2464a63485886a8
-	NOTE: https://github.com/sqlite/sqlite/commit/73bacb7f93eab9f4bd5a65cbc4ae242acf63c9e3
+	- sqlite3 <not-affected> (Generated column support was added with SQLite version 3.31.0)
+	NOTE: Fixed by: https://github.com/sqlite/sqlite/commit/522ebfa7cee96fb325a22ea3a2464a63485886a8
+	NOTE: Additional testcases: https://github.com/sqlite/sqlite/commit/73bacb7f93eab9f4bd5a65cbc4ae242acf63c9e3
 CVE-2019-19316 (When using the Azure backend with a shared access signature (SAS), Ter ...)
 	NOT-FOR-US: Terraform
 CVE-2019-19315



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7c891b2cdd126254b018f46fabe763048a527741

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/7c891b2cdd126254b018f46fabe763048a527741
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191206/bac5b26f/attachment.html>