[Secure-testing-commits] r57897 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-11-21 15:27:43 +0000 (Tue, 21 Nov 2017)
New Revision: 57897

Modified:
   data/CVE/list
Log:
Add CVE-2017-1000384/passenger

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-21 14:26:40 UTC (rev 57896)
+++ data/CVE/list	2017-11-21 15:27:43 UTC (rev 57897)
@@ -2045,6 +2045,11 @@
 	RESERVED
 CVE-2017-16242
 	RESERVED
+CVE-2017-1000384 [Arbitrary file read]
+	- passenger <undetermined>
+	- ruby-passenger <undetermined>
+	NOTE: https://blog.phusion.nl/2017/10/13/passenger-security-advisory-5-1-11/
+	TODO: check
 CVE-2017-1000383 (GNU Emacs version 25.3.1 (and other versions most likely) ignores ...)
 	NOTE: This CVE assignment is nonsense, GNU emacs reuses the umask of the original
 	NOTE: file when creating a backup file. That's hardly incorrect behaviour