[Git][security-tracker-team/security-tracker][master] Add CVE-2018-1000880/libarchive

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
723cdd92 by Salvatore Bonaccorso at 2018-12-20T20:19:09Z
Add CVE-2018-1000880/libarchive

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -23,7 +23,11 @@ CVE-2018-1000882 (WeBid version up to current version 1.2.2 contains a Directory
 CVE-2018-1000881 (Traccar Traccar Server version 4.0 and earlier contains a CWE-94: ...)
 	TODO: check
 CVE-2018-1000880 (libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 ...)
-	TODO: check
+	- libarchive <unfixed>
+	NOTE: https://bugs.launchpad.net/ubuntu/+source/libarchive/+bug/1794909
+	NOTE: https://github.com/libarchive/libarchive/pull/1105
+	NOTE: Introduced by: https://github.com/libarchive/libarchive/commit/9693801580c0cf7c70e862d305270a16b52826a7
+	NOTE: Fixed by: https://github.com/libarchive/libarchive/commit/9c84b7426660c09c18cc349f6d70b5f8168b5680
 CVE-2018-1000879 (libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 ...)
 	TODO: check
 CVE-2018-1000878 (libarchive version commit 416694915449219d505531b1096384f3237dd6cc ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/723cdd92ec032ad38a8587136b9b5e94b4991c32

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/723cdd92ec032ad38a8587136b9b5e94b4991c32
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181220/34321e96/attachment.html>