[Git][security-tracker-team/security-tracker][master] Mark CVE-2019-12456 as unimportant

Salvatore Bonaccorso carnil at debian.org
Tue Jul 23 05:43:21 BST 2019



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fa2d9fbc by Salvatore Bonaccorso at 2019-07-23T04:40:30Z
Mark CVE-2019-12456 as unimportant

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5174,7 +5174,9 @@ CVE-2019-12589 (In Firejail before 0.9.60, seccomp filters are writable inside t
 	NOTE: https://github.com/netblue30/firejail/issues/2718
 	NOTE: https://github.com/netblue30/firejail/commit/eecf35c2f8249489a1d3e512bb07f0d427183134
 CVE-2019-12456 (** DISPUTED ** An issue was discovered in the MPT3COMMAND case in _ctl ...)
-	- linux <unfixed>
+	- linux <unfixed> (unimportant)
+	NOTE: The double-fetched value is not used after the second fetch, thus an invalid issue
+	NOTE: from security impact perspective. CVE should probably be rejected.
 CVE-2019-12455 (** DISPUTED ** An issue was discovered in sunxi_divs_clk_setup in driv ...)
 	- linux <unfixed> (unimportant)
 	NOTE: No/negligible security impact



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/fa2d9fbc511da85ce7e12d55189a13e39c291c03

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/fa2d9fbc511da85ce7e12d55189a13e39c291c03
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190723/f84b9d95/attachment-0001.html>


More information about the debian-security-tracker-commits mailing list