[Git][security-tracker-team/security-tracker][master] Add some new llvm project CVEs and classify them to unimportant

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4464f09a by Salvatore Bonaccorso at 2023-05-06T12:08:54+02:00
Add some new llvm project CVEs and classify them to unimportant

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4079,13 +4079,27 @@ CVE-2023-29944
 CVE-2023-29943
 	RESERVED
 CVE-2023-29942 (llvm-project commit a0138390 was discovered to contain a segmentation  ...)
-	TODO: check
+	- llvm-toolchain-13 <unfixed> (unimportant)
+	- llvm-toolchain-14 <unfixed> (unimportant)
+	- llvm-toolchain-15 <unfixed> (unimportant)
+	NOTE: https://github.com/llvm/llvm-project/issues/59990
+	NOTE: Negligible security impact, also see https://llvm.org/docs/Security.html#what-is-considered-a-security-issue
 CVE-2023-29941 (llvm-project commit a0138390 was discovered to contain a segmentation  ...)
-	TODO: check
+	- llvm-toolchain-13 <unfixed> (unimportant)
+	- llvm-toolchain-14 <unfixed> (unimportant)
+	- llvm-toolchain-15 <unfixed> (unimportant)
+	NOTE: https://github.com/llvm/llvm-project/issues/59988
+	NOTE: https://github.com/llvm/llvm-project/commit/9a29d87538842a29b430c6956a4f914896643691
+	NOTE: Negligible security impact, also see https://llvm.org/docs/Security.html#what-is-considered-a-security-issue
 CVE-2023-29940
 	RESERVED
 CVE-2023-29939 (llvm-project commit a0138390 was discovered to contain a segmentation  ...)
-	TODO: check
+	- llvm-toolchain-13 <unfixed> (unimportant)
+	- llvm-toolchain-14 <unfixed> (unimportant)
+	- llvm-toolchain-15 <unfixed> (unimportant)
+	NOTE: https://github.com/llvm/llvm-project/issues/59983
+	NOTE: https://github.com/llvm/llvm-project/commit/466aa585c6dfb096bf9a7ad9bcbc6ce8cc7abff1
+	NOTE: Negligible security impact, also see https://llvm.org/docs/Security.html#what-is-considered-a-security-issue
 CVE-2023-29938
 	RESERVED
 CVE-2023-29937
@@ -4093,13 +4107,31 @@ CVE-2023-29937
 CVE-2023-29936
 	RESERVED
 CVE-2023-29935 (llvm-project commit a0138390 was discovered to contain an assertion fa ...)
-	TODO: check
+	- llvm-toolchain-13 <unfixed> (unimportant)
+	- llvm-toolchain-14 <unfixed> (unimportant)
+	- llvm-toolchain-15 <unfixed> (unimportant)
+	NOTE: https://github.com/llvm/llvm-project/issues/59182
+	NOTE: Negligible security impact, also see https://llvm.org/docs/Security.html#what-is-considered-a-security-issue
 CVE-2023-29934 (llvm-project commit 6c01b5c was discovered to contain a segmentation f ...)
-	TODO: check
+	- llvm-toolchain-13 <unfixed> (unimportant)
+	- llvm-toolchain-14 <unfixed> (unimportant)
+	- llvm-toolchain-15 <unfixed> (unimportant)
+	NOTE: https://github.com/llvm/llvm-project/issues/59136
+	NOTE: https://github.com/llvm/llvm-project/commit/80d5400d924e543c5420f4e924f5818313605e99
+	NOTE: Negligible security impact, also see https://llvm.org/docs/Security.html#what-is-considered-a-security-issue
 CVE-2023-29933 (llvm-project commit bd456297 was discovered to contain a segmentation  ...)
-	TODO: check
+	- llvm-toolchain-13 <unfixed> (unimportant)
+	- llvm-toolchain-14 <unfixed> (unimportant)
+	- llvm-toolchain-15 <unfixed> (unimportant)
+	NOTE: https://github.com/llvm/llvm-project/issues/59442
+	NOTE: Negligible security impact, also see https://llvm.org/docs/Security.html#what-is-considered-a-security-issue
 CVE-2023-29932 (llvm-project commit fdbc55a5 was discovered to contain a segmentation  ...)
-	TODO: check
+	- llvm-toolchain-13 <unfixed> (unimportant)
+	- llvm-toolchain-14 <unfixed> (unimportant)
+	- llvm-toolchain-15 <unfixed> (unimportant)
+	NOTE: https://github.com/llvm/llvm-project/issues/58745
+	NOTE: https://github.com/llvm/llvm-project/commit/d35fcf0e97e7bb02381506a71e61ec282b292c50
+	NOTE: Negligible security impact, also see https://llvm.org/docs/Security.html#what-is-considered-a-security-issue
 CVE-2023-29931
 	RESERVED
 CVE-2023-29930



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4464f09a0ac366624b489d523a6b6d8902509003

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4464f09a0ac366624b489d523a6b6d8902509003
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230506/c7832b4b/attachment.htm>