[Git][security-tracker-team/security-tracker][master] Update notes for CVE-2021-3592

[Markus Koschany (@apo)]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
eea83f8e by Markus Koschany at 2021-09-11T23:07:30+02:00
Update notes for CVE-2021-3592

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -14440,6 +14440,7 @@ CVE-2021-3592 (An invalid pointer initialization issue was found in the SLiRP ne
 	NOTE: https://gitlab.freedesktop.org/slirp/libslirp/-/commit/f13cad45b25d92760bb0ad67bec0300a4d7d5275 (v4.6.0)
 	NOTE: https://gitlab.freedesktop.org/slirp/libslirp/-/commit/2eca0838eee1da96204545e22cdaed860d9d7c6c (v4.6.0)
 	NOTE: qemu 1:4.1-2 switched to system libslirp, marking that version as fixed.
+	NOTE: The patch introduced a regression, see Debian bug #994080 for more information.
 CVE-2021-34558 (The crypto/tls package of Go through 1.16.5 does not properly assert t ...)
 	- golang-1.16 1.16.6-1
 	- golang-1.15 1.15.9-6



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eea83f8e70d13b256142eaa8b904f50ed364f2d0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eea83f8e70d13b256142eaa8b904f50ed364f2d0
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210911/61ba9909/attachment.htm>