[Git][security-tracker-team/security-tracker][master] Add CVE-2019-10000{19,20}/libarchive
Salvatore Bonaccorso
carnil at debian.org
Tue Feb 5 09:30:42 GMT 2019
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
71a9d3b8 by Salvatore Bonaccorso at 2019-02-05T09:30:03Z
Add CVE-2019-10000{19,20}/libarchive
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -105,9 +105,13 @@ CVE-2019-1000021 (slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab
- slixmpp 1.4.2-1
NOTE: https://lab.louiz.org/poezio/slixmpp/commit/7cd73b594e8122dddf847953fcfc85ab4d316416
CVE-2019-1000020 (libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 ...)
- TODO: check
+ - libarchive <unfixed>
+ NOTE: https://github.com/libarchive/libarchive/pull/1120
+ NOTE: https://github.com/libarchive/libarchive/commit/8312eaa576014cd9b965012af51bc1f967b12423
CVE-2019-1000019 (libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 ...)
- TODO: check
+ - libarchive <unfixed>
+ NOTE: https://github.com/libarchive/libarchive/pull/1120
+ NOTE: https://github.com/libarchive/libarchive/commit/65a23f5dbee4497064e9bb467f81138a62b0dae1
CVE-2019-1000017 (Chamilo Chamilo-lms version 1.11.8 and earlier contains an Incorrect ...)
TODO: check
CVE-2019-1000016 (FFMPEG version 4.1 contains a CWE-129: Improper Validation of Array ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/71a9d3b8435fbe2b7ce2c37849d571dac51f2615
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/71a9d3b8435fbe2b7ce2c37849d571dac51f2615
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190205/f6545335/attachment.html>
More information about the debian-security-tracker-commits
mailing list