summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMoritz Muehlenhoff <jmm@debian.org>2022-01-21 15:30:03 +0100
committerMoritz Muehlenhoff <jmm@debian.org>2022-01-21 15:30:03 +0100
commit1b8e45e9b071d0d069351bf30b8d99ac5ced2dc3 (patch)
treed42677ec9b231192c91c4c7eb2ae857f002ca327
parent990f18b38456cccceaf5cf71fa268a18ded9add2 (diff)
buster/bullseye triage
-rw-r--r--data/CVE/2020.list2
-rw-r--r--data/CVE/2021.list4
-rw-r--r--data/dsa-needed.txt2
3 files changed, 8 insertions, 0 deletions
diff --git a/data/CVE/2020.list b/data/CVE/2020.list
index b94374edf0..e3037f3bdd 100644
--- a/data/CVE/2020.list
+++ b/data/CVE/2020.list
@@ -5535,12 +5535,14 @@ CVE-2020-28853
CVE-2020-28852 (In x/text in Go before v0.3.5, a "slice bounds out of range" panic occ ...)
- golang-golang-x-text 0.3.5-1 (bug #980002)
- golang-x-text <removed>
+ [buster] - golang-x-text <no-dsa> (Minor issue)
[stretch] - golang-x-text <no-dsa> (Minor issue. Golang has limited support in stretch.)
NOTE: https://github.com/golang/go/issues/42536
NOTE: https://github.com/golang/text/commit/4482a914f52311356f6f4b7a695d4075ca22c0c6 (v0.3.5)
CVE-2020-28851 (In x/text in Go 1.15.4, an "index out of range" panic occurs in langua ...)
- golang-golang-x-text 0.3.6-1 (bug #980001)
- golang-x-text <removed>
+ [buster] - golang-x-text <no-dsa> (Minor issue)
[stretch] - golang-x-text <no-dsa> (Minor issue. Golang has limited support in stretch.)
NOTE: https://github.com/golang/go/issues/42535
CVE-2020-28850
diff --git a/data/CVE/2021.list b/data/CVE/2021.list
index 0486def2ea..e17ed7922b 100644
--- a/data/CVE/2021.list
+++ b/data/CVE/2021.list
@@ -13450,6 +13450,8 @@ CVE-2021-41044
RESERVED
CVE-2021-41043 (Use after free in tcpslice triggers AddressSanitizer, no other confirm ...)
- tcpslice <unfixed> (bug #1003190)
+ [bullseye] - tcpslice <no-dsa> (Minor issue)
+ [buster] - tcpslice <no-dsa> (Minor issue)
NOTE: https://github.com/the-tcpdump-group/tcpslice/issues/11
NOTE: https://github.com/the-tcpdump-group/tcpslice/commit/030859fce9c77417de657b9bb29c0f78c2d68f4a (tcpslice-1.5)
CVE-2021-41042
@@ -22838,6 +22840,7 @@ CVE-2021-37219 (HashiCorp Consul and Consul Enterprise 1.10.1 Raft RPC layer all
NOTE: https://discuss.hashicorp.com/t/hcsec-2021-22-consul-raft-rpc-privilege-escalation/29024
CVE-2021-37218 (HashiCorp Nomad and Nomad Enterprise Raft RPC layer allows non-server ...)
- nomad <unfixed>
+ [bullseye] - nomad <no-dsa> (Minor issue)
NOTE: https://discuss.hashicorp.com/t/hcsec-2021-21-nomad-raft-rpc-privilege-escalation/29023
NOTE: https://github.com/hashicorp/nomad/pull/11089 (main)
NOTE: https://github.com/hashicorp/nomad/commit/768d7c72a77e9c0415d92900753fc83e8822145a (release-1.1.4)
@@ -55227,6 +55230,7 @@ CVE-2021-3122 (CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH server
NOT-FOR-US: CMCAgent in NCR Command Center Agent
CVE-2021-3121 (An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarsha ...)
- golang-gogoprotobuf 1.3.2-1
+ [buster] - golang-gogoprotobuf <no-dsa> (Minor issue)
[stretch] - golang-gogoprotobuf <no-dsa> (Minor issue)
NOTE: https://github.com/gogo/protobuf/commit/b03c65ea87cdc3521ede29f62fe3ce239267c1bc
CVE-2021-3120 (An arbitrary file upload vulnerability in the YITH WooCommerce Gift Ca ...)
diff --git a/data/dsa-needed.txt b/data/dsa-needed.txt
index 9292dc665d..1d45251952 100644
--- a/data/dsa-needed.txt
+++ b/data/dsa-needed.txt
@@ -14,6 +14,8 @@ If needed, specify the release by adding a slash after the name of the source pa
--
asterisk/oldstable
--
+chromium (jmm)
+--
condor
--
faad2/oldstable (jmm)

© 2014-2024 Faster IT GmbH | imprint | privacy policy