[Git][security-tracker-team/security-tracker][master] Track fixed version for some linux issues fixed via unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
21da85b9 by Salvatore Bonaccorso at 2023-10-07T11:48:18+02:00
Track fixed version for some linux issues fixed via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -669,7 +669,7 @@ CVE-2023-5346 (Type confusion in V8 in Google Chrome prior to 117.0.5938.149 all
 	- chromium 117.0.5938.149-1
 	[buster] - chromium <end-of-life> (see DSA 5046)
 CVE-2023-5345 (A use-after-free vulnerability in the Linux kernel's fs/smb/client com ...)
-	- linux <unfixed>
+	- linux 6.5.6-1
 	[bullseye] - linux <not-affected> (Vulnerable code not present)
 	[buster] - linux <not-affected> (Vulnerable code not present)
 	NOTE: https://git.kernel.org/linus/e6e43b8aa7cd3c3af686caf0c2e11819a886d705
@@ -1888,7 +1888,7 @@ CVE-2023-43040 [Improperly verified POST keys]
 	- ceph <unfixed>
 	NOTE: https://www.openwall.com/lists/oss-security/2023/09/26/10
 CVE-2023-5197 (A use-after-free vulnerability in the Linux kernel's netfilter: nf_tab ...)
-	- linux <unfixed>
+	- linux 6.5.6-1
 	[buster] - linux <not-affected> (Vulnerable code not present)
 	NOTE: https://git.kernel.org/linus/f15f29fd4779be8a418b66e9d52979bb6d6c2325 (6.6-rc3)
 	NOTE: https://kernel.dance/f15f29fd4779be8a418b66e9d52979bb6d6c2325
@@ -2211,7 +2211,7 @@ CVE-2023-32284 (An out-of-bounds write vulnerability exists in the tiff_planar_a
 CVE-2022-48605 (Input verification vulnerability in the fingerprint module. Successful ...)
 	NOT-FOR-US: Huawei
 CVE-2023-42756 (A flaw was found in the Netfilter subsystem of the Linux kernel. A rac ...)
-	- linux <unfixed>
+	- linux 6.5.6-1
 	[bookworm] - linux 6.1.55-1
 	[buster] - linux <not-affected> (Vulnerable code not present)
 	NOTE: https://www.openwall.com/lists/oss-security/2023/09/27/2
@@ -2788,7 +2788,7 @@ CVE-2023-4237 (A flaw was found in the Ansible Automation Platform. When creatin
 	[buster] - ansible <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2229979
 CVE-2023-42754 (A NULL pointer dereference flaw was found in the Linux kernel ipv4 sta ...)
-	- linux <unfixed>
+	- linux 6.5.6-1
 	[bookworm] - linux 6.1.55-1
 	NOTE: https://www.openwall.com/lists/oss-security/2023/10/02/8
 	NOTE: https://git.kernel.org/linus/0113d9c9d1ccc07f5a3710dac4aa24b6d711278c (6.6-rc3)
@@ -3429,7 +3429,7 @@ CVE-2023-4527 (A flaw was found in glibc. When the getaddrinfo function is calle
 	NOTE: Fixed by: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=b25508dd774b617f99419bdc3cf2ace4560cd2d6 (release/2.38/master branch)
 	NOTE: https://www.openwall.com/lists/oss-security/2023/09/25/1
 CVE-2023-4921 (A use-after-free vulnerability in the Linux kernel's net/sched: sch_qf ...)
-	- linux <unfixed>
+	- linux 6.5.6-1
 	[bookworm] - linux 6.1.55-1
 	NOTE: https://kernel.dance/#8fc134fee27f2263988ae38920bc03da416b03d8
 	NOTE: https://git.kernel.org/linus/8fc134fee27f2263988ae38920bc03da416b03d8 (6.6-rc1)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/21da85b9767cbd71ff6a6cf6fdc7145424168a5e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/21da85b9767cbd71ff6a6cf6fdc7145424168a5e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20231007/9bf8070a/attachment.htm>