summaryrefslogtreecommitdiffstats
path: root/active/CVE-2021-43057
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2021-10-28 10:18:45 +0200
committerSalvatore Bonaccorso <carnil@debian.org>2021-10-28 10:18:45 +0200
commitf521401f3afb5a0cf409e3c9627d0df185067b91 (patch)
tree378ff7174c98404993a2f0f74293cf9c909e4799 /active/CVE-2021-43057
parentc64f46c605cb1a59d275a9f1efd9afe642ee3801 (diff)
Add CVE-2021-43057
Diffstat (limited to 'active/CVE-2021-43057')
-rw-r--r--active/CVE-2021-4305715
1 files changed, 15 insertions, 0 deletions
diff --git a/active/CVE-2021-43057 b/active/CVE-2021-43057
new file mode 100644
index 00000000..b6c932a5
--- /dev/null
+++ b/active/CVE-2021-43057
@@ -0,0 +1,15 @@
+Description: selinux,smack: fix subjective/objective credential use mixups
+References:
+ https://bugs.chromium.org/p/project-zero/issues/detail?id=2229
+Notes:
+ carnil> Introduced with eb1231f73c4d ("selinux: clarify task subjective
+ carnil> and objective credentials") in 5.13-rc1.
+Bugs:
+upstream: released (5.15-rc3)
+5.10-upstream-stable: N/A "Vulnerable code introduced later"
+4.19-upstream-stable: N/A "Vulnerable code introduced later"
+4.9-upstream-stable: N/A "Vulnerable code introduced later"
+sid: released (5.14.9-1)
+5.10-bullseye-security: N/A "Vulnerable code introduced later"
+4.19-buster-security: N/A "Vulnerable code introduced later"
+4.9-stretch-security: N/A "Vulnerable code introduced later"

© 2014-2024 Faster IT GmbH | imprint | privacy policy