Re: CVE applicability

2024-06-19 Thread Thomas Hochstein
Arul Anand MM wrote: > Advisory page on September 14 > https://web.archive.org/web/20230924174231/https://security-tracker.debian.org/tracker/CVE-2023-3390 > states the issue is fixed in 5.10.191-1 No, it doesn't. It states the issue was fixed - for bullseye, i.e. oldstable - in 5.10.179-3 (lowe

Re: CVE applicability

2024-06-18 Thread Salvatore Bonaccorso
Hi, On Wed, Jun 19, 2024 at 12:04:45AM +0530, Arul Anand MM wrote: > Hello Debian Security Team, > > This is regarding Debian advisory > https://security-tracker.debian.org/tracker/CVE-2023-3390. > > I would like to confirm whether version 5.10.191-1 is impacted by the UAF > and LPE. > > Adviso

CVE applicability

2024-06-18 Thread Arul Anand MM
Hello Debian Security Team, This is regarding Debian advisory https://security-tracker.debian.org/tracker/CVE-2023-3390. I would like to confirm whether version 5.10.191-1 is impacted by the UAF and LPE. Advisory page on September 14 https://web.archive.org/web/20230924174231/https://security-tr