summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMoritz Muehlenhoff <jmm@debian.org>2024-02-04 19:23:34 +0100
committerMoritz Muehlenhoff <jmm@debian.org>2024-02-04 19:23:34 +0100
commit8981f534d574354c6e1da56566d3f5de567e5b85 (patch)
tree056c16526eb0924d8272c3faec1377c754305cef
parent12580932769a5368a9e15ab623f58549f4bc394b (diff)
xen fixed in sid / spu
-rw-r--r--data/CVE/list6
-rw-r--r--data/next-point-update.txt6
2 files changed, 9 insertions, 3 deletions
diff --git a/data/CVE/list b/data/CVE/list
index 07f0118575..6edbcb7b15 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -2386,13 +2386,13 @@ CVE-2020-36772 (CloudLinux CageFS 7.0.8-2 or below insufficiently restricts fil
CVE-2020-36771 (CloudLinux CageFS 7.1.1-1 or below passes the authentication token as ...)
NOT-FOR-US: CloudLinux CageFS
CVE-2023-46840 [VT-d: Failure to quarantine devices in !HVM builds]
- - xen <unfixed>
+ - xen 4.17.3+10-g091466ba55-1
[bookworm] - xen <postponed> (Fix along in next update)
[bullseye] - xen <not-affected> (Vulnerable code not present)
[buster] - xen <not-affected> (Vulnerable code not present)
NOTE: https://xenbits.xen.org/xsa/advisory-450.html
CVE-2023-46839 [pci: phantom functions assigned to incorrect contexts]
- - xen <unfixed>
+ - xen 4.17.3+10-g091466ba55-1
[bookworm] - xen <postponed> (Fix along in next update)
[bullseye] - xen <end-of-life> (EOLed in Bullseye)
[buster] - xen <end-of-life> (DSA 4677-1)
@@ -21319,7 +21319,7 @@ CVE-2023-34324 (Closing of an event channel in the Linux kernel can result in a
NOTE: https://xenbits.xen.org/xsa/advisory-441.html
NOTE: https://git.kernel.org/linus/87797fad6cce28ec9be3c13f031776ff4f104cfc (6.6-rc6)
CVE-2023-46837 (Arm provides multiple helpers to clean & invalidate the cache for a gi ...)
- - xen <unfixed>
+ - xen 4.17.3+10-g091466ba55-1
[bookworm] - xen <postponed> (Minor issue, fix along in next DSA)
[bullseye] - xen <end-of-life> (EOLed in Bullseye)
[buster] - xen <end-of-life> (DSA 4677-1)
diff --git a/data/next-point-update.txt b/data/next-point-update.txt
index 8ca034d963..6cad605181 100644
--- a/data/next-point-update.txt
+++ b/data/next-point-update.txt
@@ -134,3 +134,9 @@ CVE-2024-22705
[bookworm] - linux 6.1.76-1
CVE-2024-23849
[bookworm] - linux 6.1.76-1
+CVE-2023-46837
+ [bookworm] - xen 4.17.3+10-g091466ba55-1~deb12u1
+CVE-2023-46840
+ [bookworm] - xen 4.17.3+10-g091466ba55-1~deb12u1
+CVE-2023-46839
+ [bookworm] - xen 4.17.3+10-g091466ba55-1~deb12u1

© 2014-2024 Faster IT GmbH | imprint | privacy policy