[Git][security-tracker-team/security-tracker][master] Add CVE-2018-1000877/libarchive

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
722a588a by Salvatore Bonaccorso at 2018-12-20T20:43:14Z
Add CVE-2018-1000877/libarchive

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -42,7 +42,11 @@ CVE-2018-1000878 (libarchive version commit 416694915449219d505531b1096384f3237d
 	NOTE: Introduced after: https://github.com/libarchive/libarchive/commit/416694915449219d505531b1096384f3237dd6cc
 	NOTE: Fixed by: https://github.com/libarchive/libarchive/commit/bfcfe6f04ed20db2504db8a254d1f40a1d84eb28
 CVE-2018-1000877 (libarchive version commit 416694915449219d505531b1096384f3237dd6cc ...)
-	TODO: check
+	- libarchive <unfixed>
+	NOTE: https://bugs.launchpad.net/ubuntu/+source/libarchive/+bug/1794909
+	NOTE: https://github.com/libarchive/libarchive/pull/1105
+	NOTE: Introduced after: https://github.com/libarchive/libarchive/commit/416694915449219d505531b1096384f3237dd6cc
+	NOTE: Fixed by: https://github.com/libarchive/libarchive/commit/021efa522ad729ff0f5806c4ce53e4a6cc1daa31
 CVE-2018-1000876 (binutils version 2.32 and earlier contains a Integer Overflow ...)
 	TODO: check
 CVE-2018-1000875 (Berkeley Open Infrastructure for Network Computing BOINC Server and ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/722a588aa4631ca5648db207d3c6da607abf2dcc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/722a588aa4631ca5648db207d3c6da607abf2dcc
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181220/da7c4ceb/attachment.html>