diff options
| author | Adrian Bunk <bunk@debian.org> | 2024-03-11 19:24:58 +0200 |
|---|---|---|
| committer | Adrian Bunk <bunk@debian.org> | 2024-03-11 19:24:58 +0200 |
| commit | b5101f27748259296b9cc0077f40d74821330c82 (patch) | |
| tree | 3b67443c35c8005d19560f19f70f8a218c25e81d | |
| parent | 438d1eff74b74dc67ec87d65acfdb3346b690e0b (diff) | |
Reserve DLA-3759-1 for qemu
| -rw-r--r-- | data/CVE/list | 3 | ||||
| -rw-r--r-- | data/DLA/list | 3 | ||||
| -rw-r--r-- | data/dla-needed.txt | 4 |
3 files changed, 3 insertions, 7 deletions
diff --git a/data/CVE/list b/data/CVE/list index 83e5c4ee74..b75015faab 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -25234,7 +25234,6 @@ CVE-2023-5088 (A bug in QEMU could cause a guest I/O operation otherwise address - qemu 1:8.1.1+ds-2 [bookworm] - qemu <no-dsa> (Minor issue) [bullseye] - qemu <no-dsa> (Minor issue) - [buster] - qemu <no-dsa> (Minor issue) NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2247283 NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/7d7512019fc40c577e2bdd61f114f31a9eb84a8e (v8.2.0-rc0) CVE-2023-4769 (A SSRF vulnerability has been found in ManageEngine Desktop Central af ...) @@ -44697,7 +44696,6 @@ CVE-2023-3354 (A flaw was found in the QEMU built-in VNC server. When a client c - qemu 1:8.0.4+dfsg-1 [bookworm] - qemu 1:7.2+dfsg-7+deb12u2 [bullseye] - qemu 1:5.2+dfsg-11+deb11u3 - [buster] - qemu <no-dsa> (Minor issue) NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2216478 NOTE: https://lists.nongnu.org/archive/html/qemu-devel/2023-07/msg01014.html NOTE: Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/5300472ec0990c61742d89b5eea1c1e6941f6d62 (v8.0.4) @@ -44759,7 +44757,6 @@ CVE-2023-2861 (A flaw was found in the 9p passthrough filesystem (9pfs) implemen - qemu 1:8.0.3+dfsg-1 [bookworm] - qemu 1:7.2+dfsg-7+deb12u1 [bullseye] - qemu <ignored> (Minor issue) - [buster] - qemu <no-dsa> (Minor issue) NOTE: https://gitlab.com/qemu-project/qemu/-/commit/f6b0de53fb87ddefed348a39284c8e2f28dc4eda CVE-2023-2860 (An out-of-bounds read vulnerability was found in the SR-IPv6 implement ...) - linux 5.19.11-1 diff --git a/data/DLA/list b/data/DLA/list index b704547d62..5517d981dd 100644 --- a/data/DLA/list +++ b/data/DLA/list @@ -1,3 +1,6 @@ +[11 Mar 2024] DLA-3759-1 qemu - security update + {CVE-2023-2861 CVE-2023-3354 CVE-2023-5088} + [buster] - qemu 1:3.1+dfsg-8+deb10u12 [11 Mar 2024] DLA-3758-1 tiff - security update {CVE-2023-3576 CVE-2023-52356} [buster] - tiff 4.1.0+git191117-2~deb10u9 diff --git a/data/dla-needed.txt b/data/dla-needed.txt index 1d329d7ab3..fc11772476 100644 --- a/data/dla-needed.txt +++ b/data/dla-needed.txt @@ -192,10 +192,6 @@ python-asyncssh NOTE: 20240116: Added by Front-Desk (lamby) NOTE: 20240131: Patch for CVE-2023-46445 and CVE-2023-46446 backported and in Git, but one test is failing. Waiting for feedback before release. (dleidert) -- -qemu (Adrian Bunk) - NOTE: 20240119: Added by Front-Desk (lamby) - NOTE: 20240119: CVE-2023-1544 and CVE-2023-3354 already fixed in bullseye via DSA or point releases; to be fixed or <ignored>. (lamby) --- rails NOTE: 20220909: Re-added due to regression (abhijith) NOTE: 20220909: Regression on 2:5.2.2.1+dfsg-1+deb10u4 (abhijith) |