[Git][security-tracker-team/security-tracker][master] Add note on fixes for CVE-2015-464{5,6}/squashfs-tools
Salvatore Bonaccorso
carnil at debian.org
Sat Aug 17 20:07:46 BST 2019
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
d811016a by Salvatore Bonaccorso at 2019-08-17T19:07:03Z
Add note on fixes for CVE-2015-464{5,6}/squashfs-tools
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -190022,6 +190022,7 @@ CVE-2015-4646 ((1) unsquash-1.c, (2) unsquash-2.c, (3) unsquash-3.c, and (4) uns
[squeeze] - squashfs-tools <no-dsa> (Minor issue)
NOTE: https://github.com/plougher/squashfs-tools/commit/f95864afe8833fe3ad782d714b41378e860977b1
NOTE: https://github.com/plougher/squashfs-tools/commit/ba215d73e153a6f237088b4ecb88c702bb4d4183
+ NOTE: Further more complete fixes went into 1:4.3+git190815-1
CVE-2015-4645 (Integer overflow in the read_fragment_table_4 function in unsquash-4.c ...)
- squashfs-tools 1:4.3-2 (bug #793467)
[jessie] - squashfs-tools <no-dsa> (Minor issue)
@@ -190029,6 +190030,7 @@ CVE-2015-4645 (Integer overflow in the read_fragment_table_4 function in unsquas
[squeeze] - squashfs-tools <no-dsa> (Minor issue)
NOTE: https://github.com/plougher/squashfs-tools/commit/f95864afe8833fe3ad782d714b41378e860977b1
NOTE: https://github.com/plougher/squashfs-tools/commit/ba215d73e153a6f237088b4ecb88c702bb4d4183
+ NOTE: Further more complete fixes went into 1:4.3+git190815-1
CVE-2015-4642 (The escapeshellarg function in ext/standard/exec.c in PHP before 5.4.4 ...)
- php5 <not-affected> (Windows specific)
NOTE: https://bugs.php.net/bug.php?id=69646
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d811016ad089bea28328b05f1d34ccfe5e570885
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d811016ad089bea28328b05f1d34ccfe5e570885
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190817/05333751/attachment.html>
More information about the debian-security-tracker-commits
mailing list