Notified:  June 19, 2019 Updated: June 20, 2019

Statement Date:   June 20, 2019

Status

Affected

Vendor Statement

You can find information about which packages(variants)a CVE affected and if(plus when)a package was fixed on our security tracker: https://security.archlinux.org/CVE-2019-11477 https://security.archlinux.org/CVE-2019-11478 https://security.archlinux.org/CVE-2019-11479 We have also published advisories to our distro specific mailinglists and on the security tracker which you will find below. The advisories contain workarounds that we recommended.

Vendor Information

To summarize the fixed versions there: kernel:linux affected:5.1.10.arch1-1 fixed:5.1.11.arch1-1 advisory:https://security.archlinux.org/ASA-201906-13 kernel:linux-lts affected:4.19.51-1 fixed:4.19.52-1 advisory:https://security.archlinux.org/ASA-201906-14 kernel:linux-hardened affected:4.19.52-1 fixed:5.1.11.a-1 advisory:https://security.archlinux.org/ASA-201906-12 kernel:linux-zen affected:5.1.10.zen1-1 fixed:5.1.11.zen1-1 advisory:https://security.archlinux.org/ASA-201906-15

Vendor References

• https://security.archlinux.org/CVE-2019-11477
• https://security.archlinux.org/CVE-2019-11478
• https://security.archlinux.org/CVE-2019-11479

Notified:  June 19, 2019 Updated: July 08, 2019

Statement Date:   July 05, 2019

Status

Affected

Vendor Statement

Affected..

Vendor Information

https://www.arista.com/en/support/advisories-notices/security-advisories/8066-secur ity-advisory-41 which provides tracking,mitigation,and long term fix information.

Vendor References

• https://www.arista.com/en/support/advisories-notices/security-advisories/8066-security-advisory-41 

Updated:  June 27, 2019

Statement Date:   June 25, 2019

Status

Affected

Vendor Statement

Check Point is vulnerable to CVE-2019-11478 and in some releases also to CVE-2019-11477. Check Point software is not vulnerable to CVE-2019-11479 or the FreeBSD CVEs.

Vendor Information

The vulnerability to the 2 CVEs is only relevant to traffic directed to or from the gateway or management machines. Traffic going through the gateway for inspection is not affected by the vulnerabilities and won't be affected by disabling SACK. There is a mitigation to the 2 relevant CVEs which is to disable SACK. All relevant information on vulnerable products,mitigations,and fixes to the issues can be found at: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGov iewsolutiondetails=&solutionid=sk156192

Vendor References

• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk156192

Notified:  June 19, 2019 Updated: June 20, 2019

Statement Date:   June 19, 2019

Status

Affected

Vendor Statement

These vulnerabilities were addressed in CoreOS Container Linux alpha 2163.2.1,beta 2135.3.1,and stable 2079.6.0. Previous versions of CoreOS Container Linux are affected.

Vendor References

• https://coreos.com/releases/

Notified:  June 19, 2019 Updated: June 20, 2019

Statement Date:   June 20, 2019

Status

Affected

Vendor Statement

Advisory at https://www.debian.org/security/2019/dsa-4465

Vendor References

• https://security-tracker.debian.org/tracker/CVE-2019-11477
• https://security-tracker.debian.org/tracker/CVE-2019-11478
• https://security-tracker.debian.org/tracker/CVE-2019-11479

Updated:  June 20, 2019

Status

Affected

Vendor Statement

Upgrade your vulnerable system to a supported FreeBSD stable or release/security branch(releng)dated after the correction date.

Vendor References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-19:08.rack.asc