[Git][security-tracker-team/security-tracker][master] Add CVE-2019-20382/qemu

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1bd32ac5 by Salvatore Bonaccorso at 2020-03-05T21:25:21+01:00
Add CVE-2019-20382/qemu

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6566,7 +6566,10 @@ CVE-2019-20384 (Gentoo Portage through 2.3.84 allows local users to place a Troj
 CVE-2019-20383
 	RESERVED
 CVE-2019-20382 (QEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle. ...)
-	TODO: check
+	- qemu <unfixed>
+	- qemu-kvm <removed>
+	NOTE: https://www.openwall.com/lists/oss-security/2020/03/05/1
+	NOTE: https://git.qemu.org/?p=qemu.git;a=commitdiff;h=6bf21f3d83e95bcc4ba35a7a07cc6655e8b010b0
 CVE-2020-7238 (Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles ...)
 	{DLA-2110-1 DLA-2109-1}
 	- netty 1:4.1.45-1 (bug #950967)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1bd32ac586af1567fe443a5885aee583eba16b1a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1bd32ac586af1567fe443a5885aee583eba16b1a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200305/c6a0eac2/attachment.html>