[Git][security-tracker-team/security-tracker][master] Mark CVE-2021-23240/sudo as unimportant

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
02df239a by Salvatore Bonaccorso at 2021-01-13T17:29:47+01:00
Mark CVE-2021-23240/sudo as unimportant

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1459,10 +1459,11 @@ CVE-2021-23242 (MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal vi
 CVE-2021-23241 (MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../  ...)
 	NOT-FOR-US: MERCUSYS Mercury X18G devices
 CVE-2021-23240 (selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a loc ...)
-	- sudo 1.9.5-1
+	- sudo 1.9.5-1 (unimportant)
 	NOTE: https://www.openwall.com/lists/oss-security/2021/01/11/2
 	NOTE: https://www.sudo.ws/repos/sudo/rev/8fcb36ef422a
 	NOTE: https://www.sudo.ws/alerts/sudoedit_selinux.html
+	NOTE: Neutralised by kernel hardening (fs.protected_symlinks = 1)
 CVE-2021-23239 (The sudoedit personality of Sudo before 1.9.5 may allow a local unpriv ...)
 	- sudo 1.9.5-1
 	NOTE: https://www.openwall.com/lists/oss-security/2021/01/11/2



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/02df239ad49f1e74ebe6a5b2c130af256f276444

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/02df239ad49f1e74ebe6a5b2c130af256f276444
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210113/de1a4397/attachment.html>