[Git][security-tracker-team/security-tracker][master] Revisit severity for CVE-2019-3689/nfs-utils

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0c34911a by Salvatore Bonaccorso at 2019-10-14T08:13:42Z
Revisit severity for CVE-2019-3689/nfs-utils

It is completely right that the kernel hardening here does not help to
mitigate the issue.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -38884,7 +38884,9 @@ CVE-2019-3691
 CVE-2019-3690
 	RESERVED
 CVE-2019-3689 (The nfs-utils package in SUSE Linux Enterprise Server 12 before and in ...)
-	- nfs-utils <unfixed> (unimportant; bug #940848)
+	- nfs-utils <unfixed> (bug #940848)
+	[buster] - nfs-utils <no-dsa> (Minor issue)
+	[stretch] - nfs-utils <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.suse.com/show_bug.cgi?id=1150733
 	NOTE: When adressing this a related patch to make statd take the user-id from
 	NOTE: /var/lib/nfs/sm is needed, cf. https://bugzilla.suse.com/show_bug.cgi?id=1150733#c3



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c34911abd2e3f813cb34169627b8ad8cce2a53c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c34911abd2e3f813cb34169627b8ad8cce2a53c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191014/59492a50/attachment-0001.html>