6 months worth of security patches!#3
Open
Megh-Rana wants to merge 6 commits into
Open
Conversation
Implemented: ============ CVE: References: Type: Severity: Updated AOSP versions: CVE-2023-20936 A-226927612 EoP High 11, 12, 12L, 13 CVE-2023-20951 A-258652631 RCE Critical 11, 12, 12L, 13 CVE-2023-20952 A-186803518 ID High 11, 12, 12L, 13 CVE-2023-20954 A-261867748 RCE Critical 11, 12, 12L, 13 CVE-2023-20955 A-258653813 EoP High 11, 12, 12L, 13 CVE-2023-20956 A-240140929 ID High 12, 12L, 13 CVE-2023-20957 A-258422561 EoP High 11, 12, 12L CVE-2023-20960 A-250589026 EoP High 12L, 13 CVE-2023-20963 A-220302519 EoP High 11, 12, 12L, 13 CVE-2023-20964 A-238177121 DoS High 12, 12L, 13 CVE-2023-20966 A-242299736 EoP High 11, 12, 12L, 13 Implemented (Qualcomm components): ================================== CVE: References: Severity: Subcomponent: CVE-2022-40537 A-261468700 High Bluetooth QC-CR#3278869 Previously Implemented: ======================= CVE: References: Type: Severity: Updated AOSP versions: Prior Change: CVE-2022-20467 A-225880741 ID High 11, 12, 12L, 13 725c555df CVE-2022-20499 A-246539931 DoS High 12, 12L, 13 bdaa8fe006 CVE-2023-20906 A-221040577 EoP High 11, 12, 12L, 13 ce0a326a0c70 CVE-2023-20910 A-245299920 DoS High 11, 12, 12L, 13 f85e5d330d CVE-2023-20911 A-242537498 EoP High 11, 12, 12L, 13 53ece2aea297 CVE-2023-20917 A-242605257 EoP High 11, 12, 12L, 13 b0acd540cd51 CVE-2023-20926 A-253043058 EoP High 12, 12L, 13 d1020a96f256 CVE-2023-20931 A-242535997 EoP High 11, 12, 12L, 13 0b82abb35b CVE-2023-20947 A-237405974 EoP High 12, 12L, 13 2b5c1e38b Not Implemented: ======================= None Not Applicable (platform source): ================================= CVE: References: Type: Severity: Updated AOSP versions: CVE-2022-4452 A-251802307 ID High 13 CVE-2023-20929 A-234442700 ID High 13 CVE-2023-20953 A-251778420 EoP High 13 CVE-2023-20958 A-254803162 ID High 13 CVE-2023-20959 A-249057848 EoP High 13 CVE-2023-20962 A-256590210 ID High 13 Change-Id: I272b28c9118bf1450bc58bdafe827d8d53c33440
Implemented: ============ CVE: References: Type: Severity: Updated AOSP versions: CVE-2022-20463 A-231985227 EoP High 11, 12, 12L, 13 CVE-2022-20471 A-238177877 ID High 11, 12, 12L, 13 CVE-2023-20909 A-243130512 ID High 11, 12, 12L, 13 CVE-2023-20950 A-195756028 EoP Moderate 11, 12, 12L CVE-2023-20967 A-225879503 EoP High 11, 12, 12L, 13 CVE-2023-21080 A-245916076 ID High 11, 12, 12L, 13 CVE-2023-21081 A-230492955 EoP High 11, 12, 12L, 13 CVE-2023-21082 A-257030107 ID High 11, 12, 12L, 13 CVE-2023-21083 A-252762941 ID High 11, 12, 12L, 13 CVE-2023-21085 A-264879662 RCE Critical 11, 12, 12L, 13 CVE-2023-21086 A-238298970 EoP High 11, 12, 12L, 13 CVE-2023-21087 A-261723753 DoS High 11, 12, 12L, 13 CVE-2023-21088 A-235823542 EoP High 12, 12L, 13 CVE-2023-21089 A-237766679 EoP High 11, 12, 12L, 13 CVE-2023-21092 A-242040055 EoP High 11, 12, 12L, 13 CVE-2023-21093 A-228450832 EoP High 11, 12, 12L, 13 CVE-2023-21094 A-248031255 EoP High 11, 12, 12L, 13 CVE-2023-21096 A-254774758 RCE Critical 12, 12L, 13 CVE-2023-21097 A-261858325 EoP High 11, 12, 12L, 13 CVE-2023-21098 A-260567867 EoP High 11, 12, 12L, 13 CVE-2023-21099 A-243377226 EoP High 11, 12, 12L, 13 CVE-2023-21100 A-242544249 EoP High 12, 12L, 13 Implemented (Qualcomm components): ================================== CVE: References: Severity: Subcomponent: CVE-2022-40503 A-258057241 High Bluetooth QC-CR#3237187 Previously Implemented: ======================= CVE: References: Type: Severity: Updated AOSP versions: Prior Change: CVE-2023-20935 A-256589724 ID High 11, 12, 12L, 13 deef9bc71 01ea3da86 Not Implemented: ======================= None Not Applicable (platform source): ================================= CVE: References: Type: Severity: Updated AOSP versions: CVE-2023-21084 A-262892300 EoP High 13 CVE-2023-21090 A-259942609 DoS High 13 CVE-2023-21091 A-257954050 DoS High 13 Change-Id: Ic7829289849b31cf6004add5337ed6255db16715
Implemented: ============ CVE: References: Type: Severity: Updated AOSP versions: CVE-2022-20338 A-171966843 EoP High 11, 12, 12L CVE-2023-20930 A-250576066 DoS High 11, 12, 12L, 13 CVE-2023-20993 A-261588851 EoP High 11, 12, 12L, 13 CVE-2023-21103 A-259064622 DoS High 11, 12, 12L, 13 CVE-2023-21104 A-259938771 ID High 12L, 13 CVE-2023-21107 A-259385017 EoP High 11, 12, 12L, 13 CVE-2023-21109 A-261589597 EoP High 11, 12, 12L, 13 CVE-2023-21110 A-258422365 EoP High 11, 12, 12L, 13 CVE-2023-21111 A-256819769 DoS High 11, 12, 12L, 13 CVE-2023-21112 A-252763983 ID High 11, 12, 12L, 13 CVE-2023-21116 A-256202273 EoP Moderate 11, 12, 12L, 13 CVE-2023-21118 A-269014004 ID High 11, 12, 12L, 13 Previously Implemented: ======================= CVE: References: Type: Severity: Updated AOSP versions: Prior Change: CVE-2021-39617 A-175190844 EoP High 11, 12, 12L e08d5420f4 Not Implemented: ======================= None Not Applicable (platform source): ================================= CVE: References: Type: Severity: Updated AOSP versions: CVE-2022-20444 A-197296414 EoP High 11, 12 CVE-2023-20914 A-189942529 ID High 11 CVE-2023-21117 A-263358101 EoP High 13 Change-Id: Ie6cb8d733c913715c4de42445b28d6f164d85006
Implemented: ============ CVE: References: Type: Severity: Updated AOSP versions: CVE-2023-21095 A-242704576 ID High 12L, 13 CVE-2023-21105 A-261036568 ID High 11, 12, 12L, 13 CVE-2023-21108 A-239414876 RCE Critical 11, 12, 12L, 13 CVE-2023-21115 A-258834033 EoP High 11, 12, 12L CVE-2023-21122 A-270050191 EoP High 11, 12, 12L, 13 CVE-2023-21123 A-270050064 EoP High 11, 12, 12L, 13 CVE-2023-21124 A-265798353 EoP High 11, 12, 12L, 13 CVE-2023-21127 A-275418191 RCE Critical 11, 12, 12L, 13 CVE-2023-21128 A-272042183 EoP High 11, 12, 12L, 13 CVE-2023-21129 A-274759612 EoP High 11, 12, 12L, 13 CVE-2023-21131 A-265015796 EoP High 11, 12, 12L, 13 CVE-2023-21135 A-260570119 EoP High 11, 12, 12L, 13 CVE-2023-21136 A-246542285 DoS High 11, 12, 12L, 13 CVE-2023-21137 A-246541702 DoS High 11, 12, 12L, 13 CVE-2023-21138 A-273260090 EoP High 11, 12, 12L, 13 CVE-2023-21141 A-262244249 ID High 11, 12, 12L, 13 CVE-2023-21142 A-262243665 ID High 11, 12, 12L, 13 CVE-2023-21143 A-268193777 DoS High 11, 12, 12L, 13 CVE-2023-21144 A-252766417 DoS High 11, 12, 12L, 13 Not Implemented: ======================= None Not Applicable (platform source): ================================= CVE: References: Type: Severity: Updated AOSP versions: CVE-2023-21121 A-205460459 EoP High 11, 12 CVE-2023-21126 A-271846393 EoP High 13 CVE-2023-21130 A-273502002 RCE Critical 13 CVE-2023-21139 A-271845008 EoP High 13 Change-Id: I1a25cd03631280047a6e74400a9e6ed3816e4204
Implemented: ============ CVE: References: Type: Severity: Updated AOSP versions: CVE-2023-20910 A-245299920 DoS High 11, 12, 12L, 13 CVE-2023-20918 A-243794108 EoP High 11, 12, 12L, 13 CVE-2023-21238 A-277740848 ID High 11, 12, 12L, 13 CVE-2023-21239 A-274592467 ID High 12, 12L, 13 CVE-2023-21240 A-275340417 DoS High 11, 12, 12L, 13 CVE-2023-21241 A-271849189 EoP High 11, 12, 12L, 13 CVE-2023-21243 A-274445194 DoS High 11, 12, 12L, 13 CVE-2023-21245 A-222446076 EoP High 11, 12, 12L, 13 CVE-2023-21246 A-273729476 EoP High 11, 12, 12L, 13 CVE-2023-21247 A-277333781 EoP High 12, 12L, 13 CVE-2023-21248 A-277333746 EoP High 12, 12L, 13 CVE-2023-21250 A-261068592 RCE Critical 11, 12, 12L, 13 CVE-2023-21251 A-204554636 EoP High 11, 12, 12L, 13 CVE-2023-21261 A-271680254 ID High 11, 12, 12L, 13 CVE-2023-21262 A-279905816 EoP High 12, 12L, 13 Previously Implemented: ======================= CVE: References: Type: Severity: Updated AOSP versions: Prior Change: CVE-2023-20942 A-258021433 EoP High 12, 12L, 13 14293ea2aa CVE-2023-21087 A-261723753 DoS High 11, 12, 12L, 13 f64311b32d86 CVE-2023-21145 A-265293293 EoP High 11, 12, 12L, 13 268ad14fea89 Not Implemented: ======================= None Not Applicable (platform source): ================================= CVE: References: Type: Severity: Updated AOSP versions: CVE-2023-2136 A-278113033 RCE High 13 CVE-2023-21249 A-217981062 ID High 13 CVE-2023-21254 A-254736794 EoP High 13 CVE-2023-21256 A-268193384 EoP High 13 CVE-2023-21257 A-257443065 EoP High 13 Change-Id: I889f58ede95af106ae2ad792bd8cb4ffdc0f7752
Implemented: ============ CVE: References: Type: Severity: Updated AOSP versions: CVE-2023-21132 A-253043218 EoP High 12, 12L, 13 CVE-2023-21133 A-253043502 EoP High 12, 12L, 13 CVE-2023-21134 A-253043495 EoP High 12, 12L, 13 CVE-2023-21140 A-253043490 EoP High 12, 12L, 13 CVE-2023-21265 A-262521447 ID High 11, 12, 12L, 13 CVE-2023-21267 A-218495634 ID High 11, 12, 12L, 13 CVE-2023-21268 A-264880895 DoS High 11, 12, 12L, 13 CVE-2023-21270 A-283006437 EoP High 12, 12L, 13 CVE-2023-21271 A-269455813 ID High 12, 12L, 13 CVE-2023-21274 A-269456018 ID High 12, 12L, 13 CVE-2023-21275 A-278691965 EoP High 12, 12L, 13 CVE-2023-21276 A-213170822 ID High 12, 12L, 13 CVE-2023-21277 A-281018094 ID High 12, 12L, 13 CVE-2023-21278 A-281807669 EoP High 12, 12L, 13 CVE-2023-21279 A-277741109 ID High 12, 12L, 13 CVE-2023-21280 A-270049379 DoS High 12, 12L, 13 CVE-2023-21281 A-265431505 EoP High 11, 12, 12L, 13 CVE-2023-21282 A-279766766 RCE Critical 11, 12, 12L, 13 CVE-2023-21283 A-280797684 ID High 11, 12, 12L, 13 CVE-2023-21284 A-260729089 DoS High 11, 12, 12L, 13 CVE-2023-21285 A-271851153 ID High 11, 12, 12L, 13 CVE-2023-21286 A-277740082 EoP High 11, 12, 12L, 13 CVE-2023-21287 A-278221085 RCE High 11, 12, 12L, 13 CVE-2023-21288 A-276294099 ID High 11, 12, 12L, 13 CVE-2023-21289 A-272020068 ID High 11, 12, 12L, 13 CVE-2023-21290 A-264880689 DoS High 11, 12, 12L, 13 CVE-2023-21292 A-236688380 ID High 11, 12, 12L, 13 Previously Implemented: ======================= CVE: References: Type: Severity: Updated AOSP versions: Prior Change: CVE-2023-21272 A-227471459 EoP High 11, 12, 12L 250579138c44 CVE-2023-21273 A-272783039 RCE Critical 11, 12, 12L, 13 12a4c8ce72 Not Implemented: ======================= None Not Applicable (platform source): ================================= CVE: References: Type: Severity: Updated AOSP versions: CVE-2023-20965 A-250574778 EoP High 13 CVE-2023-21242 A-277824547 EoP High 13 CVE-2023-21269 A-271576718 EoP High 13 Change-Id: I08d0db3b9c2e5622219217ce82e33763b322d1a7
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.