[Git][security-tracker-team/security-tracker][master] Add CVE-2020-14355/spice{,-gtk}

Salvatore Bonaccorso carnil at debian.org
Tue Oct 6 13:13:44 BST 2020



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
99db643d by Salvatore Bonaccorso at 2020-10-06T14:13:08+02:00
Add CVE-2020-14355/spice{,-gtk}

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -26160,6 +26160,12 @@ CVE-2020-14356 (A flaw null pointer dereference in the Linux kernel cgroupv2 sub
 	NOTE: Fixed by: https://git.kernel.org/linus/ad0f75e5f57ccbceec13274e1e242f2b5a6397ed
 CVE-2020-14355
 	RESERVED
+	- spice <unfixed>
+	- spice-gtk <unfixed>
+	NOTE: https://gitlab.freedesktop.org/spice/spice-common/-/commit/762e0abae36033ccde658fd52d3235887b60862d
+	NOTE: https://gitlab.freedesktop.org/spice/spice-common/-/commit/404d74782c8b5e57d146c5bf3118bb41bf3378e4
+	NOTE: https://gitlab.freedesktop.org/spice/spice-common/-/commit/ef1b6ff7b82e15d759e5415b8e35b92bb1a4c206
+	NOTE: https://gitlab.freedesktop.org/spice/spice-common/-/commit/b24fe6b66b86e601c725d30f00c37e684b6395b6
 CVE-2020-14354 [ares_destroy() with pending ares_getaddrinfo() leads to Use-After-Free]
 	RESERVED
 	- c-ares 1.16.1-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99db643d667d2327380d6c2de0e9025431054312

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99db643d667d2327380d6c2de0e9025431054312
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201006/119cde34/attachment.html>


More information about the debian-security-tracker-commits mailing list