[Git][security-tracker-team/security-tracker][master] Update information on xen issue XSA-360

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cd2abed4 by Salvatore Bonaccorso at 2021-01-25T20:05:22+01:00
Update information on xen issue XSA-360

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1062,9 +1062,12 @@ CVE-2019-25014
 	NOT-FOR-US: Istio
 CVE-2021-XXXX [Xen: IRQ vector leak on x86]
 	- xen <unfixed>
-	[buster] - xen <postponed> (Fix along in future update)
-	[stretch] - xen <end-of-life> (DSA 4602-1)
+	[buster] - xen <not-affected> (Vulnerable code introduced later)
+	[stretch] - xen <not-affected> (Vulnerable code introduced later)
 	NOTE: https://xenbits.xen.org/xsa/advisory-360.html
+	NOTE: Introduced by: https://xenbits.xen.org/gitweb/?p=xen.git;a=commit;h=5b58dad089880127674d460494d1a9d68109b3d7 (4.14.0-rc1)
+	NOTE: Issue backported to 4.12.3 and 4.13.1
+	NOTE: Fixed by: https://xenbits.xen.org/gitweb/?p=xen.git;a=commit;h=58427889f5a420cc5226f88524b3228f90b72a58
 CVE-2021-3189
 	RESERVED
 CVE-2021-3188 (phpList 3.6.0 allows CSV injection, related to the email parameter, an ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd2abed43e66e9de95a7c4397b39f6052719f341

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd2abed43e66e9de95a7c4397b39f6052719f341
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210125/628c6e8e/attachment.html>