Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 14 May 2018 09:18:05 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 228239] archivers/p7zip: Current version is vulnerable (CVE-2018-10115)
Message-ID:  <bug-228239-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D228239

            Bug ID: 228239
           Summary: archivers/p7zip: Current version is vulnerable
                    (CVE-2018-10115)
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: rakuco@FreeBSD.org
          Reporter: i.dani@outlook.com
          Assignee: rakuco@FreeBSD.org
             Flags: maintainer-feedback?(rakuco@FreeBSD.org)

The current version 16.02_1 has a critical vulnerability.

https://landave.io/2018/05/7-zip-from-uninitialized-memory-to-remote-code-e=
xecution/

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D897674

https://cve.mitre.org/cgi-bin/cvename.cgi?name=3D2018-10115

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-228239-7788>