[Git][security-tracker-team/security-tracker][master] Update status for CVE-2023-40481 and CVE-2023-31102

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
da4e55a2 by Salvatore Bonaccorso at 2026-03-02T20:32:45+01:00
Update status for CVE-2023-40481 and CVE-2023-31102

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -286200,16 +286200,20 @@ CVE-2023-31103 (Exposure of Resource to Wrong Sphere Vulnerability in Apache Sof
 CVE-2023-40481 (7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution  ...)
 	- 7zip 23.01+dfsg-1
 	[bookworm] - 7zip <no-dsa> (Minor issue; will be fixed via point release)
-	- p7zip <removed>
+	- p7zip 16.02+transitional.1
 	NOTE: https://www.zerodayinitiative.com/advisories/ZDI-23-1164/
 	NOTE: https://sourceforge.net/p/sevenzip/discussion/45797/thread/713c8a8269/
+	NOTE: Since p7zip/16.02+transitional.1 src:p7zip is only a empty source package
+	NOTE: depending on 7zip. Mark this version as fixed version.
 CVE-2023-31102 (Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid  ...)
 	- 7zip 23.01+dfsg-1
 	[bookworm] - 7zip <no-dsa> (Minor issue; will be fixed via point release)
-	- p7zip <removed>
+	- p7zip 16.02+transitional.1
 	NOTE: https://www.zerodayinitiative.com/advisories/ZDI-23-1165/
 	NOTE: https://sourceforge.net/p/sevenzip/discussion/45797/thread/713c8a8269/
 	NOTE: https://ds-security.com/post/integer-overflow-in-7-zip-cve-2023-31102/
+	NOTE: Since p7zip/16.02+transitional.1 src:p7zip is only a empty source package
+	NOTE: depending on 7zip. Mark this version as fixed version.
 CVE-2023-31101 (Insecure Default Initialization of Resource Vulnerability in Apache So ...)
 	NOT-FOR-US: Apache InLong
 CVE-2023-31100 (Improper Access Control in SMI handler vulnerability in Phoenix Secure ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da4e55a27e03a21dad8fda32d581830aa8cd2c6e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da4e55a27e03a21dad8fda32d581830aa8cd2c6e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260302/2b0dc28b/attachment.htm>