[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] CVE-2018-1000035, unzip: Wheezy builds with fortified source.
Markus Koschany
apo at debian.org
Wed Feb 7 21:01:23 UTC 2018
Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker
Commits:
03f4cf05 by Markus Koschany at 2018-02-07T22:00:46+01:00
CVE-2018-1000035,unzip: Wheezy builds with fortified source.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -636,6 +636,7 @@ CVE-2018-1000035 [Heap-based buffer overflow in password protected ZIP archives]
- unzip <unfixed> (bug #889838)
[stretch] - unzip <no-dsa> (Harmless crash, builds with fortified source)
[jessie] - unzip <no-dsa> (Harmless crash, builds with fortified source)
+ [wheezy] - unzip <no-dsa> (Harmless crash, builds with fortified source)
NOTE: https://www.sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-infozip-unzip/index.html
CVE-2018-1000034 [Multiple vulnerabilities in the LZMA compression algorithm]
RESERVED
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/03f4cf05eea1314a92155387bc722d6ce25daf9d
---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/03f4cf05eea1314a92155387bc722d6ce25daf9d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180207/350f69a0/attachment.html>
More information about the Secure-testing-commits
mailing list