[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for xen issues

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
177f85e3 by Salvatore Bonaccorso at 2020-01-02T16:03:37+01:00
Add Debian bug reference for xen issues

Decided to fill one bug for all the CVEs although there might be not
overlapping affected versions.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8065,25 +8065,25 @@ CVE-2019-19585
 CVE-2019-19584
 	RESERVED
 CVE-2019-19583 (An issue was discovered in Xen through 4.12.x allowing x86 HVM/PVH gue ...)
-	- xen <unfixed>
+	- xen <unfixed> (bug #947944)
 	NOTE: https://xenbits.xen.org/xsa/advisory-308.html
 CVE-2019-19582 (An issue was discovered in Xen through 4.12.x allowing x86 guest OS us ...)
-	- xen <unfixed>
+	- xen <unfixed> (bug #947944)
 	NOTE: https://xenbits.xen.org/xsa/advisory-307.html
 CVE-2019-19581 (An issue was discovered in Xen through 4.12.x allowing 32-bit Arm gues ...)
-	- xen <unfixed>
+	- xen <unfixed> (bug #947944)
 	NOTE: https://xenbits.xen.org/xsa/advisory-307.html
 CVE-2019-19580 (An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS ...)
-	- xen <unfixed>
+	- xen <unfixed> (bug #947944)
 	NOTE: https://xenbits.xen.org/xsa/advisory-310.html
 CVE-2019-19578 (An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS ...)
-	- xen <unfixed>
+	- xen <unfixed> (bug #947944)
 	NOTE: https://xenbits.xen.org/xsa/advisory-309.html
 CVE-2019-19577 (An issue was discovered in Xen through 4.12.x allowing x86 AMD HVM gue ...)
-	- xen <unfixed>
+	- xen <unfixed> (bug #947944)
 	NOTE: https://xenbits.xen.org/xsa/advisory-311.html
 CVE-2019-19579 (An issue was discovered in Xen through 4.12.x allowing attackers to ga ...)
-	- xen <unfixed>
+	- xen <unfixed> (bug #947944)
 	NOTE: https://xenbits.xen.org/xsa/advisory-306.html
 CVE-2019-19576 (class.upload.php in verot.net class.upload before 1.0.3 and 2.x before ...)
 	NOT-FOR-US: K2 extension for Joomla!
@@ -13903,22 +13903,22 @@ CVE-2019-18427
 CVE-2019-18426
 	RESERVED
 CVE-2019-18425 (An issue was discovered in Xen through 4.12.x allowing 32-bit PV guest ...)
-	- xen <unfixed>
+	- xen <unfixed> (bug #947944)
 	NOTE: https://xenbits.xen.org/xsa/advisory-298.html
 CVE-2019-18424 (An issue was discovered in Xen through 4.12.x allowing attackers to ga ...)
-	- xen <unfixed>
+	- xen <unfixed> (bug #947944)
 	NOTE: https://xenbits.xen.org/xsa/advisory-302.html
 CVE-2019-18423 (An issue was discovered in Xen through 4.12.x allowing ARM guest OS us ...)
-	- xen <unfixed>
+	- xen <unfixed> (bug #947944)
 	NOTE: https://xenbits.xen.org/xsa/advisory-301.html
 CVE-2019-18422 (An issue was discovered in Xen through 4.12.x allowing ARM guest OS us ...)
-	- xen <unfixed>
+	- xen <unfixed> (bug #947944)
 	NOTE: https://xenbits.xen.org/xsa/advisory-303.html
 CVE-2019-18421 (An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS ...)
-	- xen <unfixed>
+	- xen <unfixed> (bug #947944)
 	NOTE: https://xenbits.xen.org/xsa/advisory-299.html
 CVE-2019-18420 (An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS ...)
-	- xen <unfixed>
+	- xen <unfixed> (bug #947944)
 	NOTE: https://xenbits.xen.org/xsa/advisory-296.html
 CVE-2019-18419 (A cross-site scripting (XSS) vulnerability in index.php in ClonOS WEB  ...)
 	NOT-FOR-US: ClonOS
@@ -36652,7 +36652,7 @@ CVE-2019-11135 (TSX Asynchronous Abort condition on some CPUs utilizing speculat
 	{DSA-4565-1 DSA-4564-1 DLA-2051-1 DLA-1990-1 DLA-1989-1}
 	- linux 5.3.9-2
 	- intel-microcode 3.20191112.1
-	- xen <unfixed>
+	- xen <unfixed> (bug #947944)
 	NOTE: https://software.intel.com/security-software-guidance/insights/deep-dive-intel-transactional-synchronization-extensions-intel-tsx-asynchronous-abort
 	NOTE: https://xenbits.xen.org/xsa/advisory-305.html
 	NOTE: The 3.20191112.1 release for intel-microcode did contain most updates, additional
@@ -87408,7 +87408,7 @@ CVE-2018-12207 (Improper invalidation for page table updates by a virtual guest
 	{DSA-4564-1 DLA-1990-1}
 	- linux 5.3.9-2
 	[jessie] - linux <ignored> (Untrusted guests are no longer supportable)
-	- xen <unfixed>
+	- xen <unfixed> (bug #947944)
 	NOTE: https://software.intel.com/security-software-guidance/insights/deep-dive-machine-check-error-avoidance-page-size-change-0
 	NOTE: https://xenbits.xen.org/xsa/advisory-304.html
 CVE-2018-12206 (Improper configuration of hardware access in Intel QuickAssist Technol ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/177f85e362aec203b9cab35e6ad8cec24dbf9ae4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/177f85e362aec203b9cab35e6ad8cec24dbf9ae4
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200102/ee59b565/attachment.html>