[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Correct source package name for CVE-2018-5996, it's in the non-free p7zip-rar instead

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3f27b6ab by Salvatore Bonaccorso at 2018-01-24T22:35:57+01:00
Correct source package name for CVE-2018-5996, it's in the non-free p7zip-rar instead

There was created only one bug #888297 for both CVEs, but those CVEs one
affect p7zip (possibly, untriaged if the versions in Debian are
affected) and p7zip-rar in non-free (as well only possibly affected;
untriaged).

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -485,9 +485,8 @@ CVE-2018-1000007 [HTTP authentication leak in redirects]
 	NOTE: Patch: https://github.com/curl/curl/commit/af32cd3859336ab.patch
 CVE-2018-5996 [Memory Corruptions via RAR PPMd]
 	RESERVED
-	- p7zip <unfixed> (bug #888297)
+	- p7zip-rar <unfixed>
 	NOTE: https://landave.io/2018/01/7-zip-multiple-memory-corruptions-via-rar-and-zip/
-	TODO: check
 CVE-2018-5995
 	RESERVED
 CVE-2018-5994



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3f27b6ab1aa86eb6f1b63c058ccacf3e5c9a9e9e

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3f27b6ab1aa86eb6f1b63c058ccacf3e5c9a9e9e
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180124/a439c982/attachment.html>