[Git][security-tracker-team/security-tracker][master] CVE-2020-14374, CVE-2020-14375, CVE-2020-14376, CVE-2020-14377, CVE-2020-14378/dpd...

[Sylvain Beucler (@beuc)]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
05d8add6 by Sylvain Beucler at 2022-06-17T14:26:30+02:00
CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,CVE-2020-14377,CVE-2020-14378/dpdk: stretch not-affected

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -149106,33 +149106,38 @@ CVE-2020-14379
 CVE-2020-14378 (An integer underflow in dpdk versions before 18.11.10 and before 19.11 ...)
 	- dpdk 19.11.5-1 (bug #971269)
 	[buster] - dpdk 18.11.10-1~deb10u1
-	[stretch] - dpdk <no-dsa> (Minor issue)
+	[stretch] - dpdk <not-affected> (vhost_crypto introduced in v18.05-rc1)
 	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=272
 	NOTE: https://git.dpdk.org/dpdk-stable/commit/?id=7a5af91f8bf46f121cc1a7873045ef37f63d56c2 (v18.11.10)
+	NOTE: Introduced by: https://git.dpdk.org/dpdk-stable/commit/?id=fd9dd27602a6494663ace53f0d52122ed9f0de1c (v18.11.1-rc1)
 CVE-2020-14377 (A flaw was found in dpdk in versions before 18.11.10 and before 19.11. ...)
 	- dpdk 19.11.5-1 (bug #971269)
 	[buster] - dpdk 18.11.10-1~deb10u1
-	[stretch] - dpdk <no-dsa> (Minor issue)
+	[stretch] - dpdk <not-affected> (vhost_crypto introduced in v18.05-rc1)
 	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=272
 	NOTE: https://git.dpdk.org/dpdk-stable/commit/?id=7e7c75edc6351ecdc5b108ab2ff4be8852d9e090 (v18.11.10)
+	NOTE: Introduced by: https://git.dpdk.org/dpdk-stable/commit/?id=3bb595ecd6829b4019f281d56036acf4d1ccddc2 (v18.05-rc1)
 CVE-2020-14376 (A flaw was found in dpdk in versions before 18.11.10 and before 19.11. ...)
 	- dpdk 19.11.5-1 (bug #971269)
 	[buster] - dpdk 18.11.10-1~deb10u1
-	[stretch] - dpdk <no-dsa> (Minor issue)
+	[stretch] - dpdk <not-affected> (vhost_crypto introduced in v18.05-rc1)
 	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=272
 	NOTE: https://git.dpdk.org/dpdk-stable/commit/?id=7e7c75edc6351ecdc5b108ab2ff4be8852d9e090 (v18.11.10)
+	NOTE: Introduced by: https://git.dpdk.org/dpdk-stable/commit/?id=3bb595ecd6829b4019f281d56036acf4d1ccddc2 (v18.05-rc1)
 CVE-2020-14375 (A flaw was found in dpdk in versions before 18.11.10 and before 19.11. ...)
 	- dpdk 19.11.5-1 (bug #971269)
 	[buster] - dpdk 18.11.10-1~deb10u1
-	[stretch] - dpdk <no-dsa> (Minor issue)
+	[stretch] - dpdk <not-affected> (vhost_crypto introduced in v18.05-rc1)
 	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=272
 	NOTE: https://git.dpdk.org/dpdk-stable/commit/?id=6e8a4da39e68c581c236b1f109fef4b6e22b35ef (v18.11.10)
+	NOTE: Introduced by: https://git.dpdk.org/dpdk-stable/commit/?id=3bb595ecd6829b4019f281d56036acf4d1ccddc2 (v18.05-rc1)
 CVE-2020-14374 (A flaw was found in dpdk in versions before 18.11.10 and before 19.11. ...)
 	- dpdk 19.11.5-1 (bug #971269)
 	[buster] - dpdk 18.11.10-1~deb10u1
-	[stretch] - dpdk <no-dsa> (Minor issue)
+	[stretch] - dpdk <not-affected> (vhost_crypto introduced in v18.05-rc1)
 	NOTE: https://bugs.dpdk.org/show_bug.cgi?id=272
 	NOTE: https://git.dpdk.org/dpdk-stable/commit/?id=75f8df70a2c8a477ed61bf3145746ef1164466ce (v18.11.10)
+	NOTE: Introduced by: https://git.dpdk.org/dpdk-stable/commit/?id=3c79609fda7cba51835c5f76e1bf4a454c653ff2 (v18.05-rc5)
 CVE-2020-14373 (A use after free was found in igc_reloc_struct_ptr() of psi/igc.c of g ...)
 	- ghostscript 9.26~dfsg-1
 	[stretch] - ghostscript 9.26~dfsg-0+deb9u1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/05d8add6ad8e1c3b21b22b5c5298f26d2f8869d9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/05d8add6ad8e1c3b21b22b5c5298f26d2f8869d9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220617/a279247f/attachment.htm>