diff options
| author | Moritz Muehlenhoff <jmm@debian.org> | 2022-12-14 14:02:17 +0100 |
|---|---|---|
| committer | Moritz Muehlenhoff <jmm@debian.org> | 2022-12-14 14:02:17 +0100 |
| commit | 97db91052b394c5a69910974e0cc3c94cebc1a34 (patch) | |
| tree | c89efbdd583292efdd42701ba4574c036c79391e /retired/CVE-2019-19036 | |
| parent | 2001746fa4385902f4da27dd2186a6b0a4d7769d (diff) | |
retire some issues
Diffstat (limited to 'retired/CVE-2019-19036')
| -rw-r--r-- | retired/CVE-2019-19036 | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/retired/CVE-2019-19036 b/retired/CVE-2019-19036 new file mode 100644 index 00000000..7ab73d15 --- /dev/null +++ b/retired/CVE-2019-19036 @@ -0,0 +1,25 @@ +Description: btrfs: crafted image causes null deref in btrfs_root_node +References: + https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19036 + https://bugzilla.redhat.com/show_bug.cgi?id=1775187 + https://bugzilla.suse.com/show_bug.cgi?id=1157692 +Notes: + jmm> Fixed by 62fdaa52a3d00a875da771719b6dc537ca79fce1 ? + carnil> This is a good candidate and is included in 5.4-rc1. It was + carnil> futhermore backported to 5.3.4, 5.2.19 and 4.19.129, where the + carnil> 5.3.4 fixing information would as well match what is available + carnil> from the Red Hat bugzilla. + bwh> I think this affects 4.9 but the fix depends on commits going back + bwh> to at least 581c1760415c "btrfs: Validate child tree block's level + bwh> and first key". +Bugs: +upstream: released (5.4-rc1) [62fdaa52a3d00a875da771719b6dc537ca79fce1] +5.10-upstream-stable: N/A "Fixed before branch point" +4.19-upstream-stable: released (4.19.129) [227af79e6cb0ee3faeb8c70be4bc0aec0b09ea25] +4.9-upstream-stable: needed +3.16-upstream-stable: ignored "EOL" +sid: released (5.3.7-1) +5.10-bullseye-security: N/A "Fixed before branching point" +4.19-buster-security: released (4.19.131-1) +4.9-stretch-security: ignored "EOL" +3.16-jessie-security: ignored "EOL" |