Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cc8064a3 by Salvatore Bonaccorso at 2018-12-21T16:56:45Z
Add fixed version for four libarchive issues via unstable upload
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -61,26 +61,26 @@ CVE-2018-1000882 (WeBid version up to current version 1.2.2
contains a Directory
CVE-2018-1000881 (Traccar Traccar Server version 4.0 and earlier contains a
CWE-94: ...)
NOT-FOR-US: Traccar Traccar Server
CVE-2018-1000880 (libarchive version commit
9693801580c0cf7c70e862d305270a16b52826a7 ...)
- - libarchive <unfixed> (bug #916960)
+ - libarchive 3.3.3-2 (bug #916960)
NOTE: https://bugs.launchpad.net/ubuntu/+source/libarchive/+bug/1794909
NOTE: https://github.com/libarchive/libarchive/pull/1105
NOTE: Introduced by:
https://github.com/libarchive/libarchive/commit/9693801580c0cf7c70e862d305270a16b52826a7
NOTE: Fixed by:
https://github.com/libarchive/libarchive/commit/9c84b7426660c09c18cc349f6d70b5f8168b5680
CVE-2018-1000879 (libarchive version commit
379867ecb330b3a952fb7bfa7bffb7bbd5547205 ...)
- - libarchive <unfixed> (bug #916962)
+ - libarchive 3.3.3-2 (bug #916962)
[stretch] - libarchive <not-affected> (Vulnerable code introduced later)
NOTE: https://bugs.launchpad.net/ubuntu/+source/libarchive/+bug/1794909
NOTE: https://github.com/libarchive/libarchive/pull/1105
NOTE: Introduced in:
https://github.com/libarchive/libarchive/commit/379867ecb330b3a952fb7bfa7bffb7bbd5547205
(3.3.0)
NOTE: Fixed by:
https://github.com/libarchive/libarchive/commit/15bf44fd2c1ad0e3fd87048b3fcc90c4dcff1175
CVE-2018-1000878 (libarchive version commit
416694915449219d505531b1096384f3237dd6cc ...)
- - libarchive <unfixed> (bug #916963)
+ - libarchive 3.3.3-2 (bug #916963)
NOTE: https://bugs.launchpad.net/ubuntu/+source/libarchive/+bug/1794909
NOTE: https://github.com/libarchive/libarchive/pull/1105
NOTE: Introduced after:
https://github.com/libarchive/libarchive/commit/416694915449219d505531b1096384f3237dd6cc
NOTE: Fixed by:
https://github.com/libarchive/libarchive/commit/bfcfe6f04ed20db2504db8a254d1f40a1d84eb28
CVE-2018-1000877 (libarchive version commit
416694915449219d505531b1096384f3237dd6cc ...)
- - libarchive <unfixed> (bug #916964)
+ - libarchive 3.3.3-2 (bug #916964)
NOTE: https://bugs.launchpad.net/ubuntu/+source/libarchive/+bug/1794909
NOTE: https://github.com/libarchive/libarchive/pull/1105
NOTE: Introduced after:
https://github.com/libarchive/libarchive/commit/416694915449219d505531b1096384f3237dd6cc
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/cc8064a3584adb82b8dde14288bcf9d106bf383a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/cc8064a3584adb82b8dde14288bcf9d106bf383a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
