[Secure-testing-commits] r56939 - data/CVE

Tue Oct 24 13:53:36 UTC 2017

Author: geissert
Date: 2017-10-24 13:53:36 +0000 (Tue, 24 Oct 2017)
New Revision: 56939

Modified:
   data/CVE/list
Log:
apache2 issue concludes external check, probably RH-specific


Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-10-24 13:28:01 UTC (rev 56938)
+++ data/CVE/list	2017-10-24 13:53:36 UTC (rev 56939)
@@ -10199,8 +10199,11 @@
 	NOTE: Introduced by https://pagure.io/SSSD/sssd/c/7ecb5aea65cb1899f16e7a41bffa93d074defd4a (sssd-1_12_0)
 CVE-2017-12172
 	RESERVED
-CVE-2017-12171
+CVE-2017-12171 [httpd: # character matches all IPs]
 	RESERVED
+	- apache2 <undetermined>
+	TODO: check, probably RH-specific
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1493056&
 CVE-2017-12170 (Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was ...)
 	- pure-ftpd <not-affected> (Fedora specific packaging error)
 CVE-2017-12169


