diff options
| author | Salvatore Bonaccorso <carnil@debian.org> | 2020-05-17 10:07:08 +0200 |
|---|---|---|
| committer | Salvatore Bonaccorso <carnil@debian.org> | 2020-05-17 10:07:08 +0200 |
| commit | 43ddf2675a11f8a83845bee9cf2f983f91c97326 (patch) | |
| tree | 035dfc4ee1ce48db4b4512c49a75ed98749f8a23 /data | |
| parent | a4f82b037811f65779579747db9122198e63bb7a (diff) | |
Update information on CVE-2020-8608 and CVE-2020-1983
Diffstat (limited to 'data')
| -rw-r--r-- | data/CVE/list | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/data/CVE/list b/data/CVE/list index 9da34f4d04..b99b2a5ae2 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -12006,11 +12006,12 @@ CVE-2020-8608 (In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snpr [stretch] - qemu <postponed> (Minor issue) - qemu-kvm <removed> - slirp <unfixed> - - slirp4netns <unfixed> + - slirp4netns 1.0.1-1 [buster] - slirp4netns <no-dsa> (Minor issue) NOTE: https://gitlab.freedesktop.org/slirp/libslirp/commit/68ccb8021a838066f0951d4b2817eb6b6f10a843 NOTE: https://gitlab.freedesktop.org/slirp/libslirp/commit/30648c03b27fb8d9611b723184216cd3174b6775 NOTE: qemu 1:4.1-2 switched to system libslirp, marking that version as fixed. + NOTE: slirp4netns 1.0.1-1 switched to system libslirp, marking that version as fixed. CVE-2020-8607 RESERVED CVE-2020-8606 @@ -28740,10 +28741,11 @@ CVE-2020-1983 (A use after free vulnerability in ip_reass() in ip_input.c of lib - qemu 1:4.1-2 - qemu-kvm <removed> - libslirp 4.2.0-2 - - slirp4netns <unfixed> + - slirp4netns 1.0.1-1 [buster] - slirp4netns <no-dsa> (Minor issue) NOTE: https://gitlab.freedesktop.org/slirp/libslirp/-/commit/9bd6c5913271eabcb7768a58197ed3301fe19f2d - NOTE: 1:4.1-2 switched to system libslirp, marking that version as fixed + NOTE: qemu 1:4.1-2 switched to system libslirp, marking that version as fixed + NOTE: slirp4netns 1.0.1-1 switched to system libslirp, marking that version as fixed. CVE-2020-1982 RESERVED CVE-2020-1981 (A predictable temporary filename vulnerability in PAN-OS allows local ...) |