[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Do not ignore CVE-2017-15698 and claim tomcat-native in dla-needed.txt

[Markus Koschany]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
327b8417 by Markus Koschany at 2018-02-07T21:42:27+01:00
Do not ignore CVE-2017-15698 and claim tomcat-native in dla-needed.txt

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -22066,7 +22066,6 @@ CVE-2017-15699
 	TODO: check, this is possibly specific to AMQ Interconnect as used by Red Hat JBoss, although based on Apache Qpid project
 CVE-2017-15698 (When parsing the AIA-Extension field of a client certificate, Apache ...)
 	- tomcat-native 1.2.16-1
-	[wheezy] - tomcat-native <ignored> (Minor issue)
 	NOTE: https://lists.apache.org/thread.html/6eb0a53e5827d97db1a05c736d01101fec21202a5b8fc77bb0eaaed8@%3Cannounce.tomcat.apache.org%3E
 	NOTE: http://svn.apache.org/r1815200
 	NOTE: http://svn.apache.org/r1815218


=====================================
data/dla-needed.txt
=====================================
--- a/data/dla-needed.txt
+++ b/data/dla-needed.txt
@@ -70,5 +70,7 @@ python2.7 (Abhijith PA)
 --
 simplesamlphp (Abhijith PA)
 --
+tomcat-native (Markus Koschany)
+--
 uwsgi (Markus Koschany)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/327b8417d07b7c82b6643ef94b277cbe86fd070b

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/327b8417d07b7c82b6643ef94b277cbe86fd070b
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180207/032b40f1/attachment.html>