summaryrefslogtreecommitdiffstats
path: root/data
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2024-02-06 22:01:38 +0100
committerSalvatore Bonaccorso <carnil@debian.org>2024-02-06 22:01:38 +0100
commit7a3afca05854f9fad10d7bed9730fbb430b584dd (patch)
tree4a28e83e982950139a7ecd9cf98fd33b7ca50da6 /data
parent709ed7a8206904270a6ecd5b87de0a842f3a718b (diff)
Merge linux changes for bookworm 12.5
Diffstat (limited to 'data')
-rw-r--r--data/CVE/list12
-rw-r--r--data/next-point-update.txt24
2 files changed, 12 insertions, 24 deletions
diff --git a/data/CVE/list b/data/CVE/list
index 5d768634f8..e4ccae8df6 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1184,10 +1184,12 @@ CVE-2024-1087
REJECTED
CVE-2024-1086 (A use-after-free vulnerability in the Linux kernel's netfilter: nf_tab ...)
- linux 6.6.15-1
+ [bookworm] - linux 6.1.76-1
NOTE: https://kernel.dance/f342de4e2f33e0e39165d8639387aa6c19dff660
NOTE: https://git.kernel.org/linus/f342de4e2f33e0e39165d8639387aa6c19dff660 (6.8-rc2)
CVE-2024-1085 (A use-after-free vulnerability in the Linux kernel's netfilter: nf_tab ...)
- linux 6.6.15-1
+ [bookworm] - linux 6.1.76-1
[bullseye] - linux <not-affected> (Vulnerable code not present)
[buster] - linux <not-affected> (Vulnerable code not present)
NOTE: https://kernel.dance/b1db244ffd041a49ecc9618e8feb6b5c1afcdaa7
@@ -1670,6 +1672,7 @@ CVE-2024-0986 (A vulnerability was found in Issabel PBX 4.0.0. It has been rated
NOT-FOR-US: Issabel PBX
CVE-2023-52340 [ipv6: remove max_size check inline with ipv4]
- linux 6.3.7-1
+ [bookworm] - linux 6.1.76-1
NOTE: https://git.kernel.org/linus/af6d10345ca76670c1b7c37799f0d5576ccef277 (6.3-rc1)
CVE-2024-0841 (A null pointer dereference flaw was found in the hugetlbfs_fill_super ...)
- linux <unfixed>
@@ -2572,6 +2575,7 @@ CVE-2024-23850 (In btrfs_get_root_ref in fs/btrfs/disk-io.c in the Linux kernel
NOTE: https://lore.kernel.org/all/6a80cb4b32af89787dadee728310e5e2ca85343f.1705741883.git.wqu%40suse.com/
CVE-2024-23849 (In rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel thro ...)
- linux 6.6.15-1
+ [bookworm] - linux 6.1.76-1
NOTE: https://lore.kernel.org/netdev/1705715319-19199-1-git-send-email-sharath.srinivasan%40oracle.com/
CVE-2024-23848 (In the Linux kernel through 6.7.1, there is a use-after-free in cec_qu ...)
- linux <unfixed>
@@ -2594,6 +2598,7 @@ CVE-2024-23180 (Improper input validation vulnerability in a-blog cms Ver.3.1.x
NOT-FOR-US: a-blog cms
CVE-2024-22705 (An issue was discovered in ksmbd in the Linux kernel before 6.6.10. sm ...)
- linux 6.6.11-1
+ [bookworm] - linux 6.1.76-1
[bullseye] - linux <not-affected> (Vulnerable code not present)
[buster] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/d10c77873ba1e9e6b91905018e29e196fd5f863d (6.7-rc8)
@@ -2934,6 +2939,7 @@ CVE-2023-46839 [pci: phantom functions assigned to incorrect contexts]
NOTE: https://xenbits.xen.org/xsa/advisory-449.html
CVE-2023-46838 (Transmit requests in Xen's virtual network protocol can consist of mul ...)
- linux 6.6.15-1
+ [bookworm] - linux 6.1.76-1
NOTE: https://xenbits.xen.org/xsa/advisory-448.html
NOTE: https://git.kernel.org/linus/c7ec4f2d684e17d69bbdd7c4324db0ef5daac26a
CVE-2024-23771 (darkhttpd before 1.15 uses strcmp (which is not constant time) to veri ...)
@@ -4221,6 +4227,7 @@ CVE-2023-6941 (The Keap Official Opt-in Forms WordPress plugin through 1.0.11 do
NOT-FOR-US: WordPress plugin
CVE-2023-6915 (A Null pointer dereference problem was found in ida_free in lib/idr.c ...)
- linux 6.6.13-1
+ [bookworm] - linux 6.1.76-1
NOTE: https://git.kernel.org/linus/af73483f4e8b6f5c68c9aa63257bdd929a9c194a (6.7-rc7)
CVE-2023-6843 (The easy.jobs- Best Recruitment Plugin for Job Board Listing, Manager, ...)
NOT-FOR-US: WordPress plugin
@@ -11257,6 +11264,7 @@ CVE-2023-6646 (A vulnerability classified as problematic has been found in linkd
NOT-FOR-US: linkding
CVE-2023-50431 (sec_attest_info in drivers/accel/habanalabs/common/habanalabs_ioctl.c ...)
- linux 6.6.15-1
+ [bookworm] - linux 6.1.76-1
[bullseye] - linux <not-affected> (Vulnerable code not present)
[buster] - linux <not-affected> (Vulnerable code not present)
NOTE: https://lists.freedesktop.org/archives/dri-devel/2023-November/431772.html
@@ -11327,6 +11335,7 @@ CVE-2023-6611 (A vulnerability was found in Tongda OA 2017 up to 11.9. It has be
NOT-FOR-US: Tongda OA
CVE-2023-6610 (An out-of-bounds read vulnerability was found in smb2_dump_detail in f ...)
- linux 6.6.13-1 (unimportant)
+ [bookworm] - linux 6.1.76-1
NOTE: CONFIG_CIFS_DEBUG2 not enabled in Debian
NOTE: https://git.kernel.org/linus/567320c46a60a3c39b69aa1df802d753817a3f86
CVE-2023-6609 (A vulnerability was found in osCommerce 4. It has been classified as p ...)
@@ -11338,6 +11347,7 @@ CVE-2023-6607 (A vulnerability has been found in Tongda OA 2017 up to 11.10 and
CVE-2023-6606 (An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb ...)
{DLA-3710-1}
- linux 6.6.9-1
+ [bookworm] - linux 6.1.76-1
NOTE: https://bugzilla.kernel.org/show_bug.cgi?id=218218
NOTE: https://git.kernel.org/linus/b35858b3786ddbb56e1c35138ba25d6adf8d0bef
CVE-2023-6507 (An issue was found in CPython 3.12.0 `subprocess` module on POSIX plat ...)
@@ -19179,6 +19189,7 @@ CVE-2023-33517 (carRental 1.0 is vulnerable to Incorrect Access Control (Arbitra
NOT-FOR-US: carRental
CVE-2023-5633 (The reference count changes made as part of the CVE-2023-33951 and CVE ...)
- linux 6.5.8-1
+ [bookworm] - linux 6.1.76-1
[bullseye] - linux <not-affected> (Vulnerable code not present)
[buster] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/91398b413d03660fd5828f7b4abc64e884b98069 (6.6-rc6)
@@ -53298,6 +53309,7 @@ CVE-2023-1194 (An out-of-bounds (OOB) memory read flaw was found in parse_lease_
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2154176
CVE-2023-1193 (A use-after-free flaw was found in setup_async_work in the KSMBD imple ...)
- linux 6.3.7-1
+ [bookworm] - linux 6.1.76-1
[bullseye] - linux <not-affected> (Vulnerable code not present)
[buster] - linux <not-affected> (Vulnerable code not present)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2154177
diff --git a/data/next-point-update.txt b/data/next-point-update.txt
index e20ab14aaa..87c3d7b3c4 100644
--- a/data/next-point-update.txt
+++ b/data/next-point-update.txt
@@ -68,30 +68,6 @@ CVE-2023-6683
[bookworm] - qemu 1:7.2+dfsg-7+deb12u4
CVE-2024-0911
[bookworm] - indent 2.2.12-4+deb12u3
-CVE-2023-1193
- [bookworm] - linux 6.1.76-1
-CVE-2023-46838
- [bookworm] - linux 6.1.76-1
-CVE-2023-50431
- [bookworm] - linux 6.1.76-1
-CVE-2023-52340
- [bookworm] - linux 6.1.76-1
-CVE-2023-5633
- [bookworm] - linux 6.1.76-1
-CVE-2023-6606
- [bookworm] - linux 6.1.76-1
-CVE-2023-6610
- [bookworm] - linux 6.1.76-1
-CVE-2023-6915
- [bookworm] - linux 6.1.76-1
-CVE-2024-1085
- [bookworm] - linux 6.1.76-1
-CVE-2024-1086
- [bookworm] - linux 6.1.76-1
-CVE-2024-22705
- [bookworm] - linux 6.1.76-1
-CVE-2024-23849
- [bookworm] - linux 6.1.76-1
CVE-2023-46837
[bookworm] - xen 4.17.3+10-g091466ba55-1~deb12u1
CVE-2023-46840

© 2014-2024 Faster IT GmbH | imprint | privacy policy