[Git][security-tracker-team/security-tracker][master] ignore CVE-2020-1751 in glibc as LTS does not support powerpc

[Helmut Grohne (@helmutg)]

Helmut Grohne pushed to branch master at Debian Security Tracker / security-tracker


Commits:
28563bd5 by Helmut Grohne at 2022-10-07T21:04:18+02:00
ignore CVE-2020-1751 in glibc as LTS does not support powerpc

Please don't scream at me for updating stretch and jessie in the main
tracker. If I were to leave these untouched here and change them in the
elts tracker, in the best case, it would ignore the updates and keep
displaying no-dsa. In the worst case, it would reject the data failing
some uniqueness check. Been there on Tuesday...

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -208287,9 +208287,9 @@ CVE-2020-1752 (A use-after-free vulnerability introduced in glibc upstream versi
 	NOTE: Fixed by: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=ddc650e9b3dc916eab417ce9f79e67337b05035c
 CVE-2020-1751 (An out-of-bounds write vulnerability was found in glibc before 2.31 wh ...)
 	- glibc 2.30-3
-	[buster] - glibc <no-dsa> (Minor issue)
-	[stretch] - glibc <no-dsa> (Minor issue)
-	[jessie] - glibc <no-dsa> (Minor issue)
+	[buster] - glibc <ignored> (powerpc is not supported by LTS)
+	[stretch] - glibc <ignored> (powerpc is not supported by ELTS)
+	[jessie] - glibc <ignored> (powerpc is not supported by ELTS)
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=25423
 	NOTE: Fixed by: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=d93769405996dfc11d216ddbe415946617b5a494
 CVE-2020-1750 (A flaw was found in the machine-config-operator that causes an OpenShi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/28563bd510f9a698beddd397d9cae53586a0a5da

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/28563bd510f9a698beddd397d9cae53586a0a5da
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221007/77244793/attachment-0001.htm>