[Git][security-tracker-team/security-tracker][master] one qemu issue fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
80277b1b by Moritz Muehlenhoff at 2022-07-08T14:41:32+02:00
one qemu issue fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -59165,14 +59165,16 @@ CVE-2021-40321
 CVE-2021-40320
 	RESERVED
 CVE-2021-3750 (A DMA reentrancy issue was found in the USB EHCI controller emulation  ...)
-	- qemu <unfixed>
+	- qemu 1:7.0+dfsg-1
 	[bullseye] - qemu <no-dsa> (Minor issue)
 	[buster] - qemu <no-dsa> (Minor issue)
 	[stretch] - qemu <postponed> (Fix along with a future DLA)
 	NOTE: https://gitlab.com/qemu-project/qemu/-/issues/541
 	NOTE: Fix for whole class of DMA MMIO reentrancy issues: https://gitlab.com/qemu-project/qemu/-/issues/556
 	NOTE: Patchset: https://lists.nongnu.org/archive/html/qemu-devel/2021-08/msg03692.html
-	NOTE: No upstream patch as of 2022-01-28
+	NOTE: https://git.qemu.org/?p=qemu.git;a=commit;h=b9d383ab797f54ae5fa8746117770709921dc529
+	NOTE: https://git.qemu.org/?p=qemu.git;a=commit;h=58e74682baf4e1ad26b064d8c02e5bc99c75c5d9
+	NOTE: https://git.qemu.org/?p=qemu.git;a=commit;h=3ab6fdc91b72e156da22848f0003ff4225690ced
 CVE-2021-3749 (axios is vulnerable to Inefficient Regular Expression Complexity ...)
 	- node-axios 0.21.3+dfsg-1
 	[bullseye] - node-axios 0.21.1+dfsg-1+deb11u1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/80277b1b22401b5b5241c22ba631230bce79f28f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/80277b1b22401b5b5241c22ba631230bce79f28f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220708/e273b292/attachment.htm>