[Secure-testing-commits] r49010 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu Feb 16 20:52:18 UTC 2017


Author: carnil
Date: 2017-02-16 20:52:18 +0000 (Thu, 16 Feb 2017)
New Revision: 49010

Modified:
   data/CVE/list
Log:
Add fixing version for CVE-2017-5992

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-02-16 20:42:40 UTC (rev 49009)
+++ data/CVE/list	2017-02-16 20:52:18 UTC (rev 49010)
@@ -444,7 +444,7 @@
 	NOTE: http://www.openwall.com/lists/oss-security/2017/02/08/7
 	NOTE: https://github.com/viewvc/viewvc/commit/9dcfc7daa4c940992920d3b2fbd317da20e44aad
 CVE-2017-5992 (Openpyxl 2.4.1 resolves external entities by default, which allows ...)
-	- openpyxl <unfixed> (bug #854442)
+	- openpyxl 2.3.0-3 (bug #854442)
 	[jessie] - openpyxl <not-affected> (vulnerable code not present)
 	[wheezy] - openpyxl <not-affected> (vulnerable code not present)
 	NOTE: http://www.openwall.com/lists/oss-security/2017/02/07/5




More information about the Secure-testing-commits mailing list