[Git][security-tracker-team/security-tracker][master] 2 commits: Remove note forgotten to be droppend on updating the CVE entry

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
17d40e11 by Salvatore Bonaccorso at 2024-11-23T11:32:10+01:00
Remove note forgotten to be droppend on updating the CVE entry

- - - - -
2376fc71 by Salvatore Bonaccorso at 2024-11-23T11:32:49+01:00
Add CVE-2024-11612/7zip

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -417,7 +417,11 @@ CVE-2024-11630 (A vulnerability has been found in E-Lins H685, H685f, H700, H720
 CVE-2024-11619 (A vulnerability, which was classified as problematic, has been found i ...)
 	NOT-FOR-US: macrozheng mall
 CVE-2024-11612 (7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vu ...)
-	TODO: check
+	- 7zip 24.08+dfsg-1
+	- p7zip 16.02+transitional.1
+	NOTE: https://www.zerodayinitiative.com/advisories/ZDI-24-1606/
+	NOTE: Since p7zip/16.02+transitional.1 src:p7zip is only a empty source package
+	NOTE: depending on 7zip. Mark this version as fixed version.
 CVE-2024-11586 (Ubuntu's implementation of pulseaudio can be crashed by a malicious pr ...)
 	- pulseaudio <not-affected> (Vulnerable code not present, Ubuntu-specific patch)
 	NOTE: https://bugs.launchpad.net/ubuntu/+source/pulseaudio/+bug/2078822
@@ -1330,7 +1334,6 @@ CVE-2024-11477 (7-Zip Zstandard Decompression Integer Underflow Remote Code Exec
 	[bookworm] - 7zip <not-affected> (Vulnerable code introduced in 24.01)
 	- p7zip <not-affected> (Vulnerable code not present)
 	NOTE: https://www.zerodayinitiative.com/advisories/ZDI-24-1532/
-	NOTE: depending on 7zip. Mark this version as fixed version.
 CVE-2024-11233
 	- php8.2 <unfixed>
 	- php7.4 <removed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/c6f2d5a568d04dac21fa0abf5e5706381198ec59...2376fc719365e2709301c2c09a3a3e1f32d1556d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/c6f2d5a568d04dac21fa0abf5e5706381198ec59...2376fc719365e2709301c2c09a3a3e1f32d1556d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241123/c513bf45/attachment.htm>