Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
264de3d1 by Salvatore Bonaccorso at 2019-03-03T12:06:43Z
Reference commit for CVE-2018-6484/zziplib
- - - - -
569ff173 by Salvatore Bonaccorso at 2019-03-03T12:07:08Z
Associate CVE-2018-6869 Debian bug #889089
Both issues share the same fixing commit, although different, so still
we can track it under the same Debian bug.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -57798,7 +57798,7 @@ CVE-2018-6870 (Reflected XSS exists in PHP Scripts Mall
Website Seller Script 2.
NOT-FOR-US: PHP Scripts Mall Website Seller Script
CVE-2018-6869 (In ZZIPlib 0.13.68, there is an uncontrolled memory allocation
and a ...)
{DLA-1287-1}
- - zziplib <unfixed>
+ - zziplib <unfixed> (bug #889089)
[stretch] - zziplib <no-dsa> (Minor issue)
[jessie] - zziplib <no-dsa> (Minor issue)
NOTE: https://github.com/gdraheim/zziplib/issues/22
@@ -59117,6 +59117,7 @@ CVE-2018-6484 (In ZZIPlib 0.13.67, there is a memory
alignment error and bus err
[jessie] - zziplib <no-dsa> (Minor issue)
[wheezy] - zziplib <ignored> (Minor issue)
NOTE: https://github.com/gdraheim/zziplib/issues/14
+ NOTE:
https://github.com/gdraheim/zziplib/commit/0c0c9256b0903f664bca25dd8d924211f81e01d3
CVE-2018-6483
RESERVED
CVE-2018-6482
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/488bff10fddc80f355db8a1d7fa8bea97ee7c724...569ff173ad7bb82f2b70630a303e4435cc446182
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/488bff10fddc80f355db8a1d7fa8bea97ee7c724...569ff173ad7bb82f2b70630a303e4435cc446182
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
