[Git][security-tracker-team/security-tracker][master] Ignore CVE-2019-17567/apache2 for buster

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Jul 5 13:45:29 BST 2021



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e9c590ac by Salvatore Bonaccorso at 2021-07-05T14:44:56+02:00
Ignore CVE-2019-17567/apache2 for buster

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -124361,6 +124361,7 @@ CVE-2019-17568
 CVE-2019-17567 (Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configu ...)
 	[experimental] - apache2 2.4.48-1
 	- apache2 2.4.48-2
+	[buster] - apache2 <ignored> (Intrusive and risky backport)
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2019-17567
 	NOTE: https://svn.apache.org/r1885605
 CVE-2019-17566 (Apache Batik is vulnerable to server-side request forgery, caused by i ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e9c590aceb90b4f50ab6b7aec9eb6c12e929d8d7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e9c590aceb90b4f50ab6b7aec9eb6c12e929d8d7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210705/e24a7ef7/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list