Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
17d40e11 by Salvatore Bonaccorso at 2024-11-23T11:32:10+01:00
Remove note forgotten to be droppend on updating the CVE entry
- - - - -
2376fc71 by Salvatore Bonaccorso at 2024-11-23T11:32:49+01:00
Add CVE-2024-11612/7zip
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -417,7 +417,11 @@ CVE-2024-11630 (A vulnerability has been found in E-Lins
H685, H685f, H700, H720
CVE-2024-11619 (A vulnerability, which was classified as problematic, has been
found i ...)
NOT-FOR-US: macrozheng mall
CVE-2024-11612 (7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability.
This vu ...)
- TODO: check
+ - 7zip 24.08+dfsg-1
+ - p7zip 16.02+transitional.1
+ NOTE: https://www.zerodayinitiative.com/advisories/ZDI-24-1606/
+ NOTE: Since p7zip/16.02+transitional.1 src:p7zip is only a empty source
package
+ NOTE: depending on 7zip. Mark this version as fixed version.
CVE-2024-11586 (Ubuntu's implementation of pulseaudio can be crashed by a
malicious pr ...)
- pulseaudio <not-affected> (Vulnerable code not present,
Ubuntu-specific patch)
NOTE: https://bugs.launchpad.net/ubuntu/+source/pulseaudio/+bug/2078822
@@ -1330,7 +1334,6 @@ CVE-2024-11477 (7-Zip Zstandard Decompression Integer
Underflow Remote Code Exec
[bookworm] - 7zip <not-affected> (Vulnerable code introduced in 24.01)
- p7zip <not-affected> (Vulnerable code not present)
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-24-1532/
- NOTE: depending on 7zip. Mark this version as fixed version.
CVE-2024-11233
- php8.2 <unfixed>
- php7.4 <removed>
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/c6f2d5a568d04dac21fa0abf5e5706381198ec59...2376fc719365e2709301c2c09a3a3e1f32d1556d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/c6f2d5a568d04dac21fa0abf5e5706381198ec59...2376fc719365e2709301c2c09a3a3e1f32d1556d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
