Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
da4e55a2 by Salvatore Bonaccorso at 2026-03-02T20:32:45+01:00
Update status for CVE-2023-40481 and CVE-2023-31102
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -286200,16 +286200,20 @@ CVE-2023-31103 (Exposure of Resource to Wrong
Sphere Vulnerability in Apache Sof
CVE-2023-40481 (7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code
Execution ...)
- 7zip 23.01+dfsg-1
[bookworm] - 7zip <no-dsa> (Minor issue; will be fixed via point
release)
- - p7zip <removed>
+ - p7zip 16.02+transitional.1
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-23-1164/
NOTE:
https://sourceforge.net/p/sevenzip/discussion/45797/thread/713c8a8269/
+ NOTE: Since p7zip/16.02+transitional.1 src:p7zip is only a empty source
package
+ NOTE: depending on 7zip. Mark this version as fixed version.
CVE-2023-31102 (Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and
invalid ...)
- 7zip 23.01+dfsg-1
[bookworm] - 7zip <no-dsa> (Minor issue; will be fixed via point
release)
- - p7zip <removed>
+ - p7zip 16.02+transitional.1
NOTE: https://www.zerodayinitiative.com/advisories/ZDI-23-1165/
NOTE:
https://sourceforge.net/p/sevenzip/discussion/45797/thread/713c8a8269/
NOTE:
https://ds-security.com/post/integer-overflow-in-7-zip-cve-2023-31102/
+ NOTE: Since p7zip/16.02+transitional.1 src:p7zip is only a empty source
package
+ NOTE: depending on 7zip. Mark this version as fixed version.
CVE-2023-31101 (Insecure Default Initialization of Resource Vulnerability in
Apache So ...)
NOT-FOR-US: Apache InLong
CVE-2023-31100 (Improper Access Control in SMI handler vulnerability in
Phoenix Secure ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da4e55a27e03a21dad8fda32d581830aa8cd2c6e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/da4e55a27e03a21dad8fda32d581830aa8cd2c6e
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
