[Git][security-tracker-team/security-tracker][master] Add CVE-2019-10000{19,20}/libarchive

Salvatore Bonaccorso carnil at debian.org
Tue Feb 5 09:30:42 GMT 2019


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
71a9d3b8 by Salvatore Bonaccorso at 2019-02-05T09:30:03Z
Add CVE-2019-10000{19,20}/libarchive

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -105,9 +105,13 @@ CVE-2019-1000021 (slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab
 	- slixmpp 1.4.2-1
 	NOTE: https://lab.louiz.org/poezio/slixmpp/commit/7cd73b594e8122dddf847953fcfc85ab4d316416
 CVE-2019-1000020 (libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 ...)
-	TODO: check
+	- libarchive <unfixed>
+	NOTE: https://github.com/libarchive/libarchive/pull/1120
+	NOTE: https://github.com/libarchive/libarchive/commit/8312eaa576014cd9b965012af51bc1f967b12423
 CVE-2019-1000019 (libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 ...)
-	TODO: check
+	- libarchive <unfixed>
+	NOTE: https://github.com/libarchive/libarchive/pull/1120
+	NOTE: https://github.com/libarchive/libarchive/commit/65a23f5dbee4497064e9bb467f81138a62b0dae1
 CVE-2019-1000017 (Chamilo Chamilo-lms version 1.11.8 and earlier contains an Incorrect ...)
 	TODO: check
 CVE-2019-1000016 (FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/71a9d3b8435fbe2b7ce2c37849d571dac51f2615

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/71a9d3b8435fbe2b7ce2c37849d571dac51f2615
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190205/f6545335/attachment.html>


More information about the debian-security-tracker-commits mailing list