Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
bbf2bf23 by Moritz Muehlenhoff at 2019-10-25T09:56:52Z
new libarchive issue
new php issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -11,9 +11,9 @@ CVE-2019-18421
CVE-2019-18420
RESERVED
CVE-2019-18419 (A cross-site scripting (XSS) vulnerability in index.php in
ClonOS WEB ...)
- NOT-FOR-US: ClosOS
+ NOT-FOR-US: ClonOS
CVE-2019-18418 (clonos.php in ClonOS WEB control panel 19.09 allows remote
attackers t ...)
- NOT-FOR-US: ClosOS
+ NOT-FOR-US: ClonOS
CVE-2019-18417 (Sourcecodester Restaurant Management System 1.0 allows an
authenticate ...)
NOT-FOR-US: Sourcecodester Restaurant Management System
CVE-2019-18416 (Sourcecodester Restaurant Management System 1.0 allows XSS via
the Las ...)
@@ -33,7 +33,9 @@ CVE-2019-18410
CVE-2019-18409 (The ruby_parser-legacy (aka legacy) gem 1.0.0 for Ruby allows
local pr ...)
NOT-FOR-US: ruby_parser-legacy packaging issue
CVE-2019-18408 (archive_read_format_rar_read_data in
archive_read_support_format_rar.c ...)
- TODO: check
+ - libarchive 3.4.0-1
+ NOTE:
https://github.com/libarchive/libarchive/commit/b8592ecba2f9e451e1f5cb7ab6dcee8b8e7b3f60
+ NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14689
CVE-2019-18407
RESERVED
CVE-2019-18406
@@ -22334,6 +22336,11 @@ CVE-2019-11044
RESERVED
CVE-2019-11043
RESERVED
+ - php7.3 <unfixed>
+ - php7.0 <removed>
+ - php5 <removed>
+ NOTE: Fixed in PHP 7.3.11, 7.2.24
+ NOTE: https://bugs.php.net/bug.php?id=78599
CVE-2019-11042 (When PHP EXIF extension is parsing EXIF information from an
image, e.g ...)
{DSA-4529-1 DSA-4527-1 DLA-1878-1}
- php7.3 7.3.8-1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/bbf2bf23ca230dc4e28b3113c5aae60c460b40bb
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/bbf2bf23ca230dc4e28b3113c5aae60c460b40bb
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
