[Git][security-tracker-team/security-tracker][master] Update information for CVE-2020-2228{3,4}/lwip

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1d76971d by Salvatore Bonaccorso at 2022-07-06T09:40:45+02:00
Update information for CVE-2020-2228{3,4}/lwip

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -135094,19 +135094,23 @@ CVE-2020-22286
 CVE-2020-22285
 	RESERVED
 CVE-2020-22284 (A buffer overflow vulnerability in the zepif_linkoutput() function of  ...)
-	- lwip <unfixed> (bug #991646)
+	- lwip 2.1.3+dfsg1-1 (bug #991646)
 	[bullseye] - lwip <no-dsa> (Minor issue)
 	[buster] - lwip <no-dsa> (Minor issue)
 	NOTE: https://savannah.nongnu.org/bugs/index.php?58554
-	NOTE: https://git.savannah.nongnu.org/cgit/lwip.git/commit/?id=8363c24e45a32728e385cfc2c3c36d88a8a9e70b
+	NOTE: https://git.savannah.nongnu.org/cgit/lwip.git/commit/?id=8363c24e45a32728e385cfc2c3c36d88a8a9e70b (master)
+	NOTE: https://git.savannah.nongnu.org/cgit/lwip.git/commit/?id=379d55044e9181533f1fd4d0e0cf89bc01cb9b8b (STABLE-2_1_3_RC1)
 CVE-2020-22283 (A buffer overflow vulnerability in the icmp6_send_response_with_addrs_ ...)
-	- lwip <unfixed> (bug #991645)
+	- lwip 2.1.3+dfsg1-1 (bug #991645)
 	[bullseye] - lwip <no-dsa> (Minor issue)
 	[buster] - lwip <no-dsa> (Minor issue)
 	NOTE: https://savannah.nongnu.org/bugs/index.php?58553
-	NOTE: Pre-requisite: http://git.savannah.nongnu.org/cgit/lwip.git/commit/?id=d843e47a1d65451bd7f7aaa5017b408bd108be88
-	NOTE: Fixed by: https://git.savannah.nongnu.org/cgit/lwip.git/commit/?id=489405839ae0fea8b99c4896f632eb688dc8a19a
-	NOTE: Fixed by: https://git.savannah.nongnu.org/cgit/lwip.git/commit/?id=488d4ad2460c3b41bef69724cad89c28a905eda9
+	NOTE: Pre-requisite: http://git.savannah.nongnu.org/cgit/lwip.git/commit/?id=d843e47a1d65451bd7f7aaa5017b408bd108be88 (master)
+	NOTE: Fixed by: https://git.savannah.nongnu.org/cgit/lwip.git/commit/?id=489405839ae0fea8b99c4896f632eb688dc8a19a (master)
+	NOTE: Fixed by: https://git.savannah.nongnu.org/cgit/lwip.git/commit/?id=488d4ad2460c3b41bef69724cad89c28a905eda9 (master)
+	NOTE: Pre-requisite: https://git.savannah.nongnu.org/cgit/lwip.git/commit/?id=8f5a0aaacb8d88f65780cb87f14d4cff7c47c44e (STABLE-2_1_3_RC1)
+	NOTE: Fixed by: https://git.savannah.nongnu.org/cgit/lwip.git/commit/?id=6ffe30d9ba394e25844019e19ade4dc28d76f65d (STABLE-2_1_3_RC1)
+	NOTE: Fixed by: https://git.savannah.nongnu.org/cgit/lwip.git/commit/?id=ecd6009a5e64c98eb91df666b86b1ce7715675be (STABLE-2_1_3_RC1)
 CVE-2020-22282
 	RESERVED
 CVE-2020-22281



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d76971da8187810bf6b5171856efb1af51b2dbf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d76971da8187810bf6b5171856efb1af51b2dbf
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220706/a22122ac/attachment-0001.htm>