From 570831e2be8d1c58c9eaa111b92f4b618c18076f Mon Sep 17 00:00:00 2001 From: Salvatore Bonaccorso Date: Mon, 27 Jan 2020 09:37:08 +0100 Subject: Retire CVE-2019-20422 --- active/CVE-2019-20422 | 16 ---------------- retired/CVE-2019-20422 | 16 ++++++++++++++++ 2 files changed, 16 insertions(+), 16 deletions(-) delete mode 100644 active/CVE-2019-20422 create mode 100644 retired/CVE-2019-20422 diff --git a/active/CVE-2019-20422 b/active/CVE-2019-20422 deleted file mode 100644 index e444ed3a..00000000 --- a/active/CVE-2019-20422 +++ /dev/null @@ -1,16 +0,0 @@ -Description: ipv6: fix a typo in fib6_rule_lookup() -References: -Notes: - carnil> Commit fixes d64a1f5 ("ipv6: honor RT6_LOOKUP_F_DST_NOREF in - carnil> rule lookup logic") which is only present in 5.3-rc1 onwards. - carnil> Fix backported as well to 5.3.4. No Debian unstable release - carnil> ever affected, only experimental versions. -Bugs: -upstream: released (5.4-rc1) [7b09c2d052db4b4ad0b27b97918b46a7746966fa] -4.19-upstream-stable: N/A "Vulnerable code introduced later" -4.9-upstream-stable: N/A "Vulnerable code introduced later" -3.16-upstream-stable: N/A "Vulnerable code introduced later" -sid: N/A "Vulnerable code never present" -4.19-buster-security: N/A "Vulnerable code introduced later" -4.9-stretch-security: N/A "Vulnerable code introduced later" -3.16-jessie-security: N/A "Vulnerable code introduced later" diff --git a/retired/CVE-2019-20422 b/retired/CVE-2019-20422 new file mode 100644 index 00000000..e444ed3a --- /dev/null +++ b/retired/CVE-2019-20422 @@ -0,0 +1,16 @@ +Description: ipv6: fix a typo in fib6_rule_lookup() +References: +Notes: + carnil> Commit fixes d64a1f5 ("ipv6: honor RT6_LOOKUP_F_DST_NOREF in + carnil> rule lookup logic") which is only present in 5.3-rc1 onwards. + carnil> Fix backported as well to 5.3.4. No Debian unstable release + carnil> ever affected, only experimental versions. +Bugs: +upstream: released (5.4-rc1) [7b09c2d052db4b4ad0b27b97918b46a7746966fa] +4.19-upstream-stable: N/A "Vulnerable code introduced later" +4.9-upstream-stable: N/A "Vulnerable code introduced later" +3.16-upstream-stable: N/A "Vulnerable code introduced later" +sid: N/A "Vulnerable code never present" +4.19-buster-security: N/A "Vulnerable code introduced later" +4.9-stretch-security: N/A "Vulnerable code introduced later" +3.16-jessie-security: N/A "Vulnerable code introduced later" -- cgit v1.2.3