[Git][security-tracker-team/security-tracker][master] Track fixed version via unstable for libarchive issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
862400e3 by Salvatore Bonaccorso at 2022-12-25T09:22:28+01:00
Track fixed version via unstable for libarchive issues

The upload contained a typo for the CVE id, the right one would be
CVE-2022-26280.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -36132,7 +36132,7 @@ CVE-2022-36229
 CVE-2022-36228
 	RESERVED
 CVE-2022-36227 (In libarchive before 3.6.2, the software does not check for an error a ...)
-	- libarchive <unfixed> (bug #1024669)
+	- libarchive 3.6.2-1 (bug #1024669)
 	[bullseye] - libarchive <no-dsa> (Minor issue)
 	[buster] - libarchive <postponed> (Minor issue, clean crash, follow bullseye updates)
 	NOTE: https://github.com/libarchive/libarchive/issues/1754
@@ -64588,7 +64588,7 @@ CVE-2022-26282
 CVE-2022-26281 (BigAnt Server v5.6.06 was discovered to contain an incorrect access co ...)
 	NOT-FOR-US: BigAnt Server
 CVE-2022-26280 (Libarchive v3.6.0 was discovered to contain an out-of-bounds read via  ...)
-	- libarchive <unfixed> (bug #1008953)
+	- libarchive 3.6.2-1 (bug #1008953)
 	[bullseye] - libarchive <no-dsa> (Minor issue)
 	[buster] - libarchive <not-affected> (Vulnerable code not present)
 	[stretch] - libarchive <not-affected> (Vulnerable code not present)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/862400e35c6712f8a3891fcbf59db866fa1690e3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/862400e35c6712f8a3891fcbf59db866fa1690e3
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221225/79693f3e/attachment-0001.htm>