[Git][security-tracker-team/security-tracker][master] new libarchive issue

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bbf2bf23 by Moritz Muehlenhoff at 2019-10-25T09:56:52Z
new libarchive issue
new php issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11,9 +11,9 @@ CVE-2019-18421
 CVE-2019-18420
 	RESERVED
 CVE-2019-18419 (A cross-site scripting (XSS) vulnerability in index.php in ClonOS WEB  ...)
-	NOT-FOR-US: ClosOS
+	NOT-FOR-US: ClonOS
 CVE-2019-18418 (clonos.php in ClonOS WEB control panel 19.09 allows remote attackers t ...)
-	NOT-FOR-US: ClosOS
+	NOT-FOR-US: ClonOS
 CVE-2019-18417 (Sourcecodester Restaurant Management System 1.0 allows an authenticate ...)
 	NOT-FOR-US: Sourcecodester Restaurant Management System
 CVE-2019-18416 (Sourcecodester Restaurant Management System 1.0 allows XSS via the Las ...)
@@ -33,7 +33,9 @@ CVE-2019-18410
 CVE-2019-18409 (The ruby_parser-legacy (aka legacy) gem 1.0.0 for Ruby allows local pr ...)
 	NOT-FOR-US: ruby_parser-legacy packaging issue
 CVE-2019-18408 (archive_read_format_rar_read_data in archive_read_support_format_rar.c ...)
-	TODO: check
+	- libarchive 3.4.0-1
+	NOTE: https://github.com/libarchive/libarchive/commit/b8592ecba2f9e451e1f5cb7ab6dcee8b8e7b3f60
+	NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14689
 CVE-2019-18407
 	RESERVED
 CVE-2019-18406
@@ -22334,6 +22336,11 @@ CVE-2019-11044
 	RESERVED
 CVE-2019-11043
 	RESERVED
+	- php7.3 <unfixed>
+	- php7.0 <removed>
+	- php5 <removed>
+	NOTE: Fixed in PHP 7.3.11, 7.2.24
+	NOTE: https://bugs.php.net/bug.php?id=78599
 CVE-2019-11042 (When PHP EXIF extension is parsing EXIF information from an image, e.g ...)
 	{DSA-4529-1 DSA-4527-1 DLA-1878-1}
 	- php7.3 7.3.8-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/bbf2bf23ca230dc4e28b3113c5aae60c460b40bb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/bbf2bf23ca230dc4e28b3113c5aae60c460b40bb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191025/b2ebf9bf/attachment-0001.html>