CVE-2017-9525 in Debian Stretch stable release

From	Vladyslav Cherednychenko <vladyslav.cherednychenko@aboutyou.com>
Newsgroups	linux.debian.security
Subject	CVE-2017-9525 in Debian Stretch stable release
Date	2019-07-11 17:40 +0200
Message-ID	<yiJkS-7IY-9@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Dear Debian Security Team,
I noticed that the latest available cron package in the stable distribution of Debian Stretch is vulnerable to CVE-2017-9525:
https://security-tracker.debian.org/tracker/CVE-2017-9525
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864466

It seems like this issue has been known for a while now and fixed. Are there plans to include cron version 3.0pl1-129 to the stable release of Debian Stretch?

Regards,
Vladyslav Cherednychenko
Information Security Engineer

ABOUT YOU° GmbH
Domstraße 10
20095 Hamburg
Email: vladyslav.cherednychenko@aboutyou.de
Phone: +49 40 638 569 313
www.aboutyou.de

Back to linux.debian.security | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

CVE-2017-9525 in Debian Stretch stable release Vladyslav Cherednychenko <vladyslav.cherednychenko@aboutyou.com> - 2019-07-11 17:40 +0200
  Re: CVE-2017-9525 in Debian Stretch stable release Salvatore Bonaccorso <carnil@debian.org> - 2019-07-16 22:10 +0200

csiph-web