[Secure-testing-commits] r51078 - data/CVE

Antoine Beaupré anarcat at moszumanska.debian.org
Wed Apr 26 18:21:47 UTC 2017


Author: anarcat
Date: 2017-04-26 18:21:47 +0000 (Wed, 26 Apr 2017)
New Revision: 51078

Modified:
   data/CVE/list
Log:
dig out possible batik upstream issue



Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-04-26 18:06:47 UTC (rev 51077)
+++ data/CVE/list	2017-04-26 18:21:47 UTC (rev 51078)
@@ -7447,6 +7447,8 @@
 CVE-2017-5662 (In Apache Batik before 1.9, files lying on the filesystem of the ...)
 	- batik <unfixed> (bug #860566)
 	NOTE: http://www.openwall.com/lists/oss-security/2017/04/18/1
+	NOTE: probably https://issues.apache.org/jira/browse/BATIK-1139
+	NOTE: similar to CVE-2015-0250
 CVE-2017-5661 (In Apache FOP before 2.2, files lying on the filesystem of the server ...)
 	- fop <unfixed> (bug #860567)
 	NOTE: http://www.openwall.com/lists/oss-security/2017/04/18/2




More information about the Secure-testing-commits mailing list