[Git][security-tracker-team/security-tracker][master] Update tracking of CVE-2020-27821/qemu

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fa614b8b by Salvatore Bonaccorso at 2020-12-17T21:00:40+01:00
Update tracking of CVE-2020-27821/qemu

In
https://tracker.debian.org/news/1200013/accepted-qemu-152dfsg-1-source-into-unstable/
the fix for CVE-2020-27821 was referred to the
https://git.qemu.org/?p=qemu.git;a=commit;h=1370d61ae3c9934861d2349349447605202f04e9
upstream commit.

But the root cause of the issue seem different and narroved down to the
fix as
https://git.qemu.org/?p=qemu.git;a=commit;h=4bfb024bc76973d40a359476dc0291f46e435442

Correct thus the NOTE referring to the fixing commit and update status
for the source package.

Link: https://www.openwall.com/lists/oss-security/2020/12/16/6

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9511,10 +9511,10 @@ CVE-2020-27823 [Heap-buffer-overflow write in lib-openjp2]
 CVE-2020-27822 (A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Fi ...)
 	- wildfly <itp> (bug #752018)
 CVE-2020-27821 (A flaw was found in the memory management API of QEMU during the initi ...)
-	- qemu 1:5.2+dfsg-1
+	- qemu <unfixed>
 	[stretch] - qemu <postponed> (Fix along in future DLA)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1902651
-	NOTE: https://git.qemu.org/?p=qemu.git;a=commit;h=1370d61ae3c9934861d2349349447605202f04e9
+	NOTE: https://git.qemu.org/?p=qemu.git;a=commit;h=4bfb024bc76973d40a359476dc0291f46e435442
 CVE-2020-27820 [use-after-free in nouveau kernel module]
 	RESERVED
 	- linux <unfixed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fa614b8baddac78ce836a02215cf858ca687743a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fa614b8baddac78ce836a02215cf858ca687743a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201217/a02fafdf/attachment.html>