Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: d7c9f36e by Salvatore Bonaccorso at 2019-07-11T18:52:27Z Add fixed version for CVE-2019-13232/unzip - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -615,7 +615,7 @@ CVE-2019-13234 RESERVED CVE-2019-13232 (Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP co ...) {DLA-1846-1} - - unzip <unfixed> (unimportant; bug #931433) + - unzip 6.0-24 (unimportant; bug #931433) NOTE: https://www.bamsoftware.com/hacks/zipbomb/ NOTE: Fixed by: https://github.com/madler/unzip/commit/47b3ceae397d21bf822bc2ac73052a4b1daf8e1c NOTE: Fix depends on: https://github.com/madler/unzip/commit/41beb477c5744bc396fa1162ee0c14218ec12213 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d7c9f36e015b358b3ed6c0e35470464f498b30ab -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d7c9f36e015b358b3ed6c0e35470464f498b30ab You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits