[Git][security-tracker-team/security-tracker][master] 2 commits: mark CVE-2020-13132 and CVE-2020-13131 as not-affected in Stretch

[Thorsten Alteholz]

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker


Commits:
54c88abf by Thorsten Alteholz at 2020-08-26T14:48:05+02:00
mark CVE-2020-13132 and CVE-2020-13131 as not-affected in Stretch

- - - - -
e8bbe9ac by Thorsten Alteholz at 2020-08-26T14:49:50+02:00
CVEs of yubico-piv-tool do not affect Stretch

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -24900,10 +24900,12 @@ CVE-2020-13133
 	RESERVED
 CVE-2020-13132 (An issue was discovered in Yubico libykpiv before 2.1.0. An attacker c ...)
 	- yubico-piv-tool <unfixed>
+	[stretch] - yubico-piv-tool <not-affected> (Vulnerable code not present)
 	NOTE: https://www.yubico.com/support/security-advisories/ysa-2020-02/
 	NOTE: https://blog.inhq.net/posts/yubico-libykpiv-vuln/
 CVE-2020-13131 (An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in ...)
 	- yubico-piv-tool <unfixed>
+	[stretch] - yubico-piv-tool <not-affected> (Vulnerable code not present)
 	NOTE: https://blog.inhq.net/posts/yubico-libykpiv-vuln/
 CVE-2020-13143 (gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linu ...)
 	{DSA-4699-1 DSA-4698-1 DLA-2242-1 DLA-2241-1}


=====================================
data/dla-needed.txt
=====================================
@@ -212,7 +212,3 @@ xcftools
   NOTE: 20200523: Proposed fix https://github.com/j-jorge/xcftools/pull/15 (gladk)
   NOTE: 20200605: Patch https://salsa.debian.org/lts-team/packages/xcftools/-/blob/fix/test-CVE-2019-5087/debian/patches/CVE-2019-5087.patch (gladk)
 --
-yubico-piv-tool (Thorsten Alteholz)
-  NOTE: 20200815: About CVE-2020-13131. Blog post available, but patch URLs seemingly not provided.
-  NOTE: 20200815: Needs deeper research. (sunweaver)
---



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/b9965ae00f1823e18c584873bd67812049e5c335...e8bbe9ac1bd6de0a217a8cc3f5daf0adea31e1ae

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/b9965ae00f1823e18c584873bd67812049e5c335...e8bbe9ac1bd6de0a217a8cc3f5daf0adea31e1ae
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200826/388f731a/attachment.html>