[Git][security-tracker-team/security-tracker][master] Track CVE fixes for linux/5.9.6-1
Salvatore Bonaccorso
carnil at debian.org
Sun Nov 8 13:21:04 GMT 2020
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
79866de9 by Salvatore Bonaccorso at 2020-11-08T14:11:44+01:00
Track CVE fixes for linux/5.9.6-1
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -3687,10 +3687,10 @@ CVE-2020-27602 (BigBlueButton before 2.2.7 does not have a protection mechanism
CVE-2020-27601 (In BigBlueButton before 2.2.7, lockSettingsProps.disablePrivateChat do ...)
NOT-FOR-US: BigBlueButton
CVE-2020-27673 (An issue was discovered in the Linux kernel through 5.9.1, as used wit ...)
- - linux <unfixed>
+ - linux 5.9.6-1
NOTE: https://xenbits.xen.org/xsa/advisory-332.html
CVE-2020-27675 (An issue was discovered in the Linux kernel through 5.9.1, as used wit ...)
- - linux <unfixed>
+ - linux 5.9.6-1
NOTE: https://xenbits.xen.org/xsa/advisory-331.html
CVE-2020-27674 (An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS ...)
- xen <unfixed>
@@ -4623,7 +4623,7 @@ CVE-2020-27155 (An issue was discovered in Octopus Deploy through 2020.4.4. If e
CVE-2020-27154
RESERVED
CVE-2020-27152 (An issue was discovered in ioapic_lazy_update_eoi in arch/x86/kvm/ioap ...)
- - linux <unfixed>
+ - linux 5.9.6-1
[buster] - linux <not-affected> (Vulnerable code not present)
[stretch] - linux <not-affected> (Vulnerable code not present)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1888886
@@ -7840,7 +7840,7 @@ CVE-2020-25669
NOTE: https://www.openwall.com/lists/oss-security/2020/11/05/2
CVE-2020-25668 [concurrency use-after-free in vt]
RESERVED
- - linux <unfixed>
+ - linux 5.9.6-1
NOTE: https://www.openwall.com/lists/oss-security/2020/10/30/1
NOTE: https://git.kernel.org/linus/90bfdeef83f1d6c696039b6a917190dcbbad3220
CVE-2020-25667
@@ -7872,7 +7872,7 @@ CVE-2020-25657
RESERVED
CVE-2020-25656
RESERVED
- - linux <unfixed>
+ - linux 5.9.6-1
NOTE: https://www.openwall.com/lists/oss-security/2020/10/16/1
CVE-2020-25655
RESERVED
@@ -32291,7 +32291,7 @@ CVE-2020-14352 (A flaw was found in librepo in versions before 1.12.1. A directo
NOT-FOR-US: librepo
CVE-2020-14351 [perf: Fix race in perf_mmap_close function]
RESERVED
- - linux <unfixed>
+ - linux 5.9.6-1
NOTE: https://lore.kernel.org/lkml/20200910104153.1672460-1-jolsa@kernel.org/
CVE-2020-14350 (It was found that some PostgreSQL extensions did not use search_path s ...)
{DLA-2331-1}
@@ -73093,7 +73093,7 @@ CVE-2020-0424
RESERVED
NOT-FOR-US: Android
CVE-2020-0423 (In binder_release_work of binder.c, there is a possible use-after-free ...)
- - linux <unfixed>
+ - linux 5.9.6-1
NOTE: https://git.kernel.org/linus/f3277cbfba763cd2826396521b9296de67cf1bbc
CVE-2020-0422 (In constructImportFailureNotification of NotificationImportExportListe ...)
NOT-FOR-US: Android
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/79866de9c43be8c7d3ed7f89ea679452879c9efc
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/79866de9c43be8c7d3ed7f89ea679452879c9efc
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201108/31e428ec/attachment.html>
More information about the debian-security-tracker-commits
mailing list