[Git][security-tracker-team/security-tracker][master] add firmware references for intel GPU issues

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4a1e03cb by Moritz Muehlenhoff at 2021-03-17T11:08:46+01:00
add firmware references for intel GPU issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -65835,6 +65835,8 @@ CVE-2020-12755 (fishProtocol::establishConnection in fish/fish.cpp in KDE kio-ex
 	NOTE: https://github.com/KDE/kio-extras/commit/d813cef3cecdec9af1532a40d677a203ff979145
 CVE-2019-20794 (An issue was discovered in the Linux kernel 4.18 through 5.6.11 when u ...)
 	- linux <unfixed>
+	[bullseye] - linux <postponed> (Minor issue, revisit when fixed upstream)
+	[buster] - linux <postponed> (Minor issue, revisit when fixed upstream)
 	NOTE: https://sourceforge.net/p/fuse/mailman/message/36598753/
 CVE-2020-12754 (An issue was discovered on LG mobile devices with Android OS 7.2, 8.0, ...)
 	NOT-FOR-US: LG mobile devices
@@ -66921,22 +66923,28 @@ CVE-2020-12365 (Untrusted pointer dereference in some Intel(R) Graphics Drivers
 	NOT-FOR-US: Intel graphics drivers for Windows
 CVE-2020-12364 (Null pointer reference in some Intel(R) Graphics Drivers for Windows*  ...)
 	- linux <unfixed>
+	- firmware-nonfree 20210208-1
 	NOTE: Short of details: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html
 	NOTE: Per Intel, this was fixed by a firmware update. v49.0.1 of the
 	NOTE: firmware is required. The new firmware requires a kernel patch
 	NOTE: https://git.kernel.org/linus/c784e5249e773689e38d2bc1749f08b986621a26
+	NOTE: Firmware was added via https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=c487f7dadcd21116613441ed355b764003b3f57b
 CVE-2020-12363 (Improper input validation in some Intel(R) Graphics Drivers for Window ...)
 	- linux <unfixed>
+	- firmware-nonfree 20210208-1
 	NOTE: Short of details: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html
 	NOTE: Per Intel, this was fixed by a firmware update. v49.0.1 of the
 	NOTE: firmware is required. The new firmware requires a kernel patch
 	NOTE: https://git.kernel.org/linus/c784e5249e773689e38d2bc1749f08b986621a26
+	NOTE: Firmware was added via https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=c487f7dadcd21116613441ed355b764003b3f57b
 CVE-2020-12362 (Integer overflow in the firmware for some Intel(R) Graphics Drivers fo ...)
 	- linux <unfixed>
+	- firmware-nonfree 20210208-1
 	NOTE: Short of details: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00438.html
 	NOTE: Per Intel, this was fixed by a firmware update. v49.0.1 of the
 	NOTE: firmware is required. The new firmware requires a kernel patch
 	NOTE: https://git.kernel.org/linus/c784e5249e773689e38d2bc1749f08b986621a26
+	NOTE: Firmware was added via https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=c487f7dadcd21116613441ed355b764003b3f57b
 CVE-2020-12361 (Use after free in some Intel(R) Graphics Drivers before version 15.33. ...)
 	NOT-FOR-US: Intel graphics drivers for Windows
 CVE-2020-12360



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4a1e03cbb9b514ac045d9cc90ab4e02f4979af93

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4a1e03cbb9b514ac045d9cc90ab4e02f4979af93
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210317/d9a7cb45/attachment.htm>