Author: carnil
Date: 2017-11-21 15:27:43 +0000 (Tue, 21 Nov 2017)
New Revision: 57897
Modified:
data/CVE/list
Log:
Add CVE-2017-1000384/passenger
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-11-21 14:26:40 UTC (rev 57896)
+++ data/CVE/list 2017-11-21 15:27:43 UTC (rev 57897)
@@ -2045,6 +2045,11 @@
RESERVED
CVE-2017-16242
RESERVED
+CVE-2017-1000384 [Arbitrary file read]
+ - passenger <undetermined>
+ - ruby-passenger <undetermined>
+ NOTE:
https://blog.phusion.nl/2017/10/13/passenger-security-advisory-5-1-11/
+ TODO: check
CVE-2017-1000383 (GNU Emacs version 25.3.1 (and other versions most likely)
ignores ...)
NOTE: This CVE assignment is nonsense, GNU emacs reuses the umask of
the original
NOTE: file when creating a backup file. That's hardly incorrect
behaviour
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
