Utkarsh Gupta pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b32fee42 by Utkarsh Gupta at 2020-03-12T03:09:26+05:30
Mark CVE-2019-20509/libarchive as not-affected for Stretch and Buster
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -244,8 +244,8 @@ CVE-2020-10264
RESERVED
CVE-2019-20509 (archive_read_support_format_lha.c in libarchive before 3.4.1
does not ...)
- libarchive <unfixed> (bug #953578)
- [buster] - libarchive <no-dsa> (Minor issue)
- [stretch] - libarchive <no-dsa> (Minor issue)
+ [buster] - libarchive <not-affected> (vulnerable code was introduced
later)
+ [stretch] - libarchive <not-affected> (vulnerable code was introduced
later)
[jessie] - libarchive <not-affected> (vulnerable code was introduced
later)
NOTE:
https://github.com/libarchive/libarchive/commit/91cf9372e89f7af4582964b15ceb7fc6d1b37471
NOTE: https://github.com/libarchive/libarchive/issues/1284
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b32fee42561e05c0ba20e828ccb6172590f9008d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b32fee42561e05c0ba20e828ccb6172590f9008d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
