[Git][security-tracker-team/security-tracker][master] Add CVE-2018-1002209/libquazip

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
06090074 by Salvatore Bonaccorso at 2018-06-21T09:06:23+02:00
Add CVE-2018-1002209/libquazip

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -1855,6 +1855,10 @@ CVE-2018-12066 (BIRD Internet Routing Daemon before 1.6.4 allows local users to 
 	[jessie] - bird <no-dsa> (Minor issue)
 	NOTE: https://gitlab.labs.nic.cz/labs/bird/blob/v1.6.4/NEWS#L11
 	NOTE: Fixed by: https://gitlab.labs.nic.cz/labs/bird/commit/e8bc64e308586b6502090da2775af84cd760ed0d
+CVE-2018-1002209 [arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file]
+	- libquazip <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1593011
+	TODO: further checks, should be fixedin 0.7.6
 CVE-2018-1002204 [nodejs-adm-zip: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file]
 	NOT-FOR-US: adm-zip nodejs module
 CVE-2018-1002202 [Arbitrary File Write via Archive Extraction]



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/06090074cfcea1fefcd5e6cb600f82c48b115a94

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/06090074cfcea1fefcd5e6cb600f82c48b115a94
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180621/7c123208/attachment.html>