[Secure-testing-commits] r51079 - data/CVE

Antoine Beaupré anarcat at moszumanska.debian.org
Wed Apr 26 19:01:23 UTC 2017


Author: anarcat
Date: 2017-04-26 19:01:23 +0000 (Wed, 26 Apr 2017)
New Revision: 51079

Modified:
   data/CVE/list
Log:
found possible issue for fop's CVE-2017-5661



Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-04-26 18:21:47 UTC (rev 51078)
+++ data/CVE/list	2017-04-26 19:01:23 UTC (rev 51079)
@@ -7452,6 +7452,8 @@
 CVE-2017-5661 (In Apache FOP before 2.2, files lying on the filesystem of the server ...)
 	- fop <unfixed> (bug #860567)
 	NOTE: http://www.openwall.com/lists/oss-security/2017/04/18/2
+	NOTE: probably https://issues.apache.org/jira/browse/FOP-2668
+	NOTE: probably related to CVE-2017-5662
 CVE-2017-5660
 	RESERVED
 CVE-2017-5659 (Apache Traffic Server before 6.2.1 generates a coredump when there is ...)




More information about the Secure-testing-commits mailing list