[Git][security-tracker-team/security-tracker][master] Add CVE-2020-14355/spice{,-gtk}
Salvatore Bonaccorso
carnil at debian.org
Tue Oct 6 13:13:44 BST 2020
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
99db643d by Salvatore Bonaccorso at 2020-10-06T14:13:08+02:00
Add CVE-2020-14355/spice{,-gtk}
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -26160,6 +26160,12 @@ CVE-2020-14356 (A flaw null pointer dereference in the Linux kernel cgroupv2 sub
NOTE: Fixed by: https://git.kernel.org/linus/ad0f75e5f57ccbceec13274e1e242f2b5a6397ed
CVE-2020-14355
RESERVED
+ - spice <unfixed>
+ - spice-gtk <unfixed>
+ NOTE: https://gitlab.freedesktop.org/spice/spice-common/-/commit/762e0abae36033ccde658fd52d3235887b60862d
+ NOTE: https://gitlab.freedesktop.org/spice/spice-common/-/commit/404d74782c8b5e57d146c5bf3118bb41bf3378e4
+ NOTE: https://gitlab.freedesktop.org/spice/spice-common/-/commit/ef1b6ff7b82e15d759e5415b8e35b92bb1a4c206
+ NOTE: https://gitlab.freedesktop.org/spice/spice-common/-/commit/b24fe6b66b86e601c725d30f00c37e684b6395b6
CVE-2020-14354 [ares_destroy() with pending ares_getaddrinfo() leads to Use-After-Free]
RESERVED
- c-ares 1.16.1-1
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99db643d667d2327380d6c2de0e9025431054312
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99db643d667d2327380d6c2de0e9025431054312
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201006/119cde34/attachment.html>
More information about the debian-security-tracker-commits
mailing list