Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #5573 > unrolled thread
| Started by | Bjørn Håkon Noss <nb@noss.cc> |
|---|---|
| First post | 2019-03-18 09:50 +0100 |
| Last post | 2019-03-23 12:50 +0100 |
| Articles | 3 — 2 participants |
Back to article view | Back to linux.debian.security
apache2 CVE-2018-17199 stretch Bjørn Håkon Noss <nb@noss.cc> - 2019-03-18 09:50 +0100
Re: apache2 CVE-2018-17199 stretch Stefan Fritsch <sf@sfritsch.de> - 2019-03-22 21:50 +0100
Re: apache2 CVE-2018-17199 stretch Bjørn Håkon Noss <nb@noss.cc> - 2019-03-23 12:50 +0100
| From | Bjørn Håkon Noss <nb@noss.cc> |
|---|---|
| Date | 2019-03-18 09:50 +0100 |
| Subject | apache2 CVE-2018-17199 stretch |
| Message-ID | <xCW82-7E2-7@gated-at.bofh.it> |
Hi After looking at the Security tracker (https://security-tracker.debian.org/tracker/CVE-2018-17199), I can see that CVE-2018-17199 is fixed in both jessie and buster but not stretch. Do you have any information about if and when it will be fixed in stretch? The bug causes our PCI Compliance to fail. Thanks /b
[toc] | [next] | [standalone]
| From | Stefan Fritsch <sf@sfritsch.de> |
|---|---|
| Date | 2019-03-22 21:50 +0100 |
| Message-ID | <xEzh0-3uQ-1@gated-at.bofh.it> |
| In reply to | #5573 |
On Monday, 18 March 2019 09:19:41 CET Bjørn Håkon Noss wrote: > After looking at the Security tracker > (https://security-tracker.debian.org/tracker/CVE-2018-17199), I can > see that CVE-2018-17199 is fixed in both jessie and buster but not > stretch. > > Do you have any information about if and when it will be fixed in stretch? > > The bug causes our PCI Compliance to fail. As this is low severity, we intend to fix this in the next Debian stable point release (9.9). Cheers, Stefan
[toc] | [prev] | [next] | [standalone]
| From | Bjørn Håkon Noss <nb@noss.cc> |
|---|---|
| Date | 2019-03-23 12:50 +0100 |
| Message-ID | <xENjX-3Pk-3@gated-at.bofh.it> |
| In reply to | #5574 |
Thanks for the reply Stefan That makes sense. /Bjørn Håkon Den fre. 22. mar. 2019 kl. 21:20 skrev Stefan Fritsch <sf@sfritsch.de>: > > On Monday, 18 March 2019 09:19:41 CET Bjørn Håkon Noss wrote: > > After looking at the Security tracker > > (https://security-tracker.debian.org/tracker/CVE-2018-17199), I can > > see that CVE-2018-17199 is fixed in both jessie and buster but not > > stretch. > > > > Do you have any information about if and when it will be fixed in stretch? > > > > The bug causes our PCI Compliance to fail. > > As this is low severity, we intend to fix this in the next Debian stable point > release (9.9). > > Cheers, > Stefan > > > >
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.security
csiph-web