summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2020-10-16 23:10:19 +0200
committerSalvatore Bonaccorso <carnil@debian.org>2020-10-16 23:10:19 +0200
commit53d9a92cd83018b3f26446167b0ec919b3896a1f (patch)
tree27323116b50bad53029a26e6b8cdc4138cecc3a3
parent4d4d9eb682034a89d2a9758d8e9431363b74188d (diff)
Expand note on fixing commit for CVE-2020-1235{1,2}
-rw-r--r--active/CVE-2020-123514
-rw-r--r--active/CVE-2020-123524
2 files changed, 8 insertions, 0 deletions
diff --git a/active/CVE-2020-12351 b/active/CVE-2020-12351
index fb0ddbe5..8a547910 100644
--- a/active/CVE-2020-12351
+++ b/active/CVE-2020-12351
@@ -21,6 +21,10 @@ Notes:
carnil> The "fixed version" information in INTEL-SA-00435 is thus as
carnil> well contradictory as it mentions the issue to be fixed in 5.9
carnil> or later.
+ carnil> CVE-2020-12351 is specifically referred to f19425641cb2
+ carnil> ("Bluetooth: L2CAP: Fix calling sk_filter on non-socket based
+ carnil> channel") and is backported to 5.9.1, 5.8.16, 4.19.152, 4.9.240
+ carnil> (and other stable versions).
Bugs:
upstream: pending [f19425641cb2572a33cb074d5e30283720bd4d22]
4.19-upstream-stable: needed
diff --git a/active/CVE-2020-12352 b/active/CVE-2020-12352
index b3b0888c..624863cb 100644
--- a/active/CVE-2020-12352
+++ b/active/CVE-2020-12352
@@ -21,6 +21,10 @@ Notes:
carnil> The "fixed version" information in INTEL-SA-00435 is thus as
carnil> well contradictory as it mentions the issue to be fixed in 5.9
carnil> or later.
+ carnil> CVE-2020-12352 is specifically referred to eddb7732119d
+ carnil> ("Bluetooth: A2MP: Fix not initializing all members") and is
+ carnil> backported to 5.9.1, 5.8.16, 4.19.152, 4.9.240 (and other
+ carnil> stable versions).
Bugs:
upstream: pending [eddb7732119d53400f48a02536a84c509692faa8]
4.19-upstream-stable: needed

© 2014-2024 Faster IT GmbH | imprint | privacy policy