[Git][security-tracker-team/security-tracker][master] Add CVE-2018-1000879/libarchive
Salvatore Bonaccorso
carnil at debian.org
Thu Dec 20 20:30:09 GMT 2018
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
db1f1035 by Salvatore Bonaccorso at 2018-12-20T20:29:40Z
Add CVE-2018-1000879/libarchive
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -29,7 +29,12 @@ CVE-2018-1000880 (libarchive version commit 9693801580c0cf7c70e862d305270a16b528
NOTE: Introduced by: https://github.com/libarchive/libarchive/commit/9693801580c0cf7c70e862d305270a16b52826a7
NOTE: Fixed by: https://github.com/libarchive/libarchive/commit/9c84b7426660c09c18cc349f6d70b5f8168b5680
CVE-2018-1000879 (libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 ...)
- TODO: check
+ - libarchive <unfixed>
+ [stretch] - libarchive <not-affected> (Vulnerable code introduced later)
+ NOTE: https://bugs.launchpad.net/ubuntu/+source/libarchive/+bug/1794909
+ NOTE: https://github.com/libarchive/libarchive/pull/1105
+ NOTE: Introduced in https://github.com/libarchive/libarchive/commit/379867ecb330b3a952fb7bfa7bffb7bbd5547205 (3.3.0)
+ NOTE: Fixed by: https://github.com/libarchive/libarchive/commit/15bf44fd2c1ad0e3fd87048b3fcc90c4dcff1175
CVE-2018-1000878 (libarchive version commit 416694915449219d505531b1096384f3237dd6cc ...)
TODO: check
CVE-2018-1000877 (libarchive version commit 416694915449219d505531b1096384f3237dd6cc ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/db1f1035db921e1af10e1cd5aad20f7d3286f70d
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/db1f1035db921e1af10e1cd5aad20f7d3286f70d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181220/a94e1960/attachment.html>
More information about the debian-security-tracker-commits
mailing list