[Secure-testing-commits] r56081 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sun Sep 24 05:35:37 UTC 2017


Author: carnil
Date: 2017-09-24 05:35:37 +0000 (Sun, 24 Sep 2017)
New Revision: 56081

Modified:
   data/CVE/list
Log:
Apache2 issue fixed in unstable

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-24 05:34:55 UTC (rev 56080)
+++ data/CVE/list	2017-09-24 05:35:37 UTC (rev 56081)
@@ -12090,7 +12090,7 @@
 	NOT-FOR-US: Apache Storm
 CVE-2017-9798 (Apache httpd allows remote attackers to read secret data from process ...)
 	{DSA-3980-1 DLA-1102-1}
-	- apache2 <unfixed> (bug #876109)
+	- apache2 2.4.27-6 (bug #876109)
 	NOTE: https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html
 	NOTE: https://github.com/hannob/optionsbleed
 	NOTE: Patch: https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/server/core.c?r1=1805223&r2=1807754&pathrev=1807754&view=patch




More information about the Secure-testing-commits mailing list