[Git][security-tracker-team/security-tracker][master] 2 commits: Reference commit for CVE-2018-6484/zziplib

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
264de3d1 by Salvatore Bonaccorso at 2019-03-03T12:06:43Z
Reference commit for CVE-2018-6484/zziplib

- - - - -
569ff173 by Salvatore Bonaccorso at 2019-03-03T12:07:08Z
Associate CVE-2018-6869 Debian bug #889089

Both issues share the same fixing commit, although different, so still
we can track it under the same Debian bug.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -57798,7 +57798,7 @@ CVE-2018-6870 (Reflected XSS exists in PHP Scripts Mall Website Seller Script 2.
 	NOT-FOR-US: PHP Scripts Mall Website Seller Script
 CVE-2018-6869 (In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a ...)
 	{DLA-1287-1}
-	- zziplib <unfixed>
+	- zziplib <unfixed> (bug #889089)
 	[stretch] - zziplib <no-dsa> (Minor issue)
 	[jessie] - zziplib <no-dsa> (Minor issue)
 	NOTE: https://github.com/gdraheim/zziplib/issues/22
@@ -59117,6 +59117,7 @@ CVE-2018-6484 (In ZZIPlib 0.13.67, there is a memory alignment error and bus err
 	[jessie] - zziplib <no-dsa> (Minor issue)
 	[wheezy] - zziplib <ignored> (Minor issue)
 	NOTE: https://github.com/gdraheim/zziplib/issues/14
+	NOTE: https://github.com/gdraheim/zziplib/commit/0c0c9256b0903f664bca25dd8d924211f81e01d3
 CVE-2018-6483
 	RESERVED
 CVE-2018-6482



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/488bff10fddc80f355db8a1d7fa8bea97ee7c724...569ff173ad7bb82f2b70630a303e4435cc446182

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/488bff10fddc80f355db8a1d7fa8bea97ee7c724...569ff173ad7bb82f2b70630a303e4435cc446182
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190303/04a4dc02/attachment.html>