[Secure-testing-commits] r54836 - in data: . CVE

Sebastien Delafond seb at moszumanska.debian.org
Fri Aug 18 05:56:06 UTC 2017


Author: seb
Date: 2017-08-18 05:56:06 +0000 (Fri, 18 Aug 2017)
New Revision: 54836

Modified:
   data/CVE/list
   data/dsa-needed.txt
Log:
Add newsbeuter issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-08-18 05:10:18 UTC (rev 54835)
+++ data/CVE/list	2017-08-18 05:56:06 UTC (rev 54836)
@@ -26,8 +26,10 @@
 	RESERVED
 CVE-2017-12905
 	RESERVED
-CVE-2017-12904
-	RESERVED
+CVE-2017-12904 [RCE in newbeuter when bookmarking malicious article]
+	- newsbeuter <unfixed>
+	NOTE: https://github.com/akrennmair/newsbeuter/issues/591
+	NOTE: https://github.com/akrennmair/newsbeuter/commit/96e9506ae9e252c548665152d1b8968297128307
 CVE-2017-12903
 	RESERVED
 CVE-2017-12902

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt	2017-08-18 05:10:18 UTC (rev 54835)
+++ data/dsa-needed.txt	2017-08-18 05:56:06 UTC (rev 54836)
@@ -78,6 +78,9 @@
   2017-08-13: jcristau provided stretch debdiff, jessie to come a bit
               later
 --
+newsbeuter (seb)
+  2017-08-17: maintainer prepared debdiff
+--
 openjdk-7/oldstable (jmm)
 --
 php-horde-image




More information about the Secure-testing-commits mailing list