Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fe076dc6 by Salvatore Bonaccorso at 2019-09-06T19:23:25Z
Update affected status for CVE-2019-12402/libcommons-compress-java
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -11065,7 +11065,7 @@ CVE-2019-12403
CVE-2019-12402 (The file name encoding algorithm used internally in Apache
Commons Com ...)
- libcommons-compress-java <unfixed> (low)
[buster] - libcommons-compress-java <no-dsa> (Minor issue)
- [stretch] - libcommons-compress-java <no-dsa> (Minor issue)
+ [stretch] - libcommons-compress-java <not-affected> (Vulnerable code
introduced later)
[jessie] - libcommons-compress-java <not-affected> (Vulnerable code
introduced later)
NOTE: https://www.openwall.com/lists/oss-security/2019/08/27/1
NOTE: Fixed in upstream commit:
https://gitbox.apache.org/repos/asf?p=commons-compress.git;a=commitdiff;h=4ad5d80a6272e007f64a6ac66829ca189a8093b9;hp=16a0c84e84b93cc8c107b7ff3080bd11317ab581
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/fe076dc6edf925b6a534a9dacd92d6af2d9b2680
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/fe076dc6edf925b6a534a9dacd92d6af2d9b2680
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
