[freeplane] 01/01: fix changelog entry

Felix Natter fnatter-guest at moszumanska.debian.org
Sun Apr 1 15:56:05 UTC 2018


This is an automated email from the git hooks/post-receive script.

fnatter-guest pushed a commit to branch stretch-CVE-2018-1000069
in repository freeplane.

commit c358116cf3858f53a7f8e9b43f2bfc5a26515048
Author: Felix Natter <fnatter at gmx.net>
Date:   Sun Apr 1 17:56:00 2018 +0200

    fix changelog entry
---
 debian/changelog | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index a591cc6..0fb9b24 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,11 @@
-freeplane (1.5.18-1+deb9u1) unstable; urgency=medium
+freeplane (1.5.18-1+deb9u1) stretch-security; urgency=high
 
-  * fix CVE-2018-1000069
+  * Fix CVE-2018-1000069: Wojciech Reguła discovered that FreePlane was
+    affected by a XML External Entity (XXE) vulnerability in its mindmap
+    loader that could compromise a user's machine by opening a specially
+    crafted mind map file. (Closes: #893663)
 
- -- Felix Natter <fnatter at gmx.net>  Sun, 01 Apr 2018 15:53:49 +0200
+ -- Felix Natter <fnatter at gmx.net>  Sun, 01 Apr 2018 17:55:27 +0200
 
 freeplane (1.5.18-1) unstable; urgency=medium
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-java/freeplane.git



More information about the pkg-java-commits mailing list