Recent Vulnerabilities Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-2017-14941 CVE-2017-5533 CVE-2017-5532 CVE-2017-5528 CVE-2017-5529

Source

Debian Bug report logs - #884131
jasperreports: CVE-2017-14941, CVE-2017-5533, CVE-2017-5532

Package: libjasperreports-java; Maintainer for libjasperreports-java is Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>; Source for libjasperreports-java is src:jasperreports (PTS, buildd, popcon).

Reported by: Markus Koschany <apo@debian.org>

Date: Mon, 11 Dec 2017 19:06:01 UTC

Severity: important

Tags: security

Found in version jasperreports/6.3.1-1

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, apo@debian.org, team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>:
Bug#884131; Package libjasperreports-java. (Mon, 11 Dec 2017 19:06:03 GMT) (full text, mbox, link).

Acknowledgement sent to Markus Koschany <apo@debian.org>:
New Bug report received and forwarded. Copy sent to apo@debian.org, team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>. (Mon, 11 Dec 2017 19:06:03 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

Package: libjasperreports-java
Version: 6.3.1-1
Severity: important
Tags: security

The recent update of jasperreports apparently fixed CVE-2017-5528 and
CVE-2017-5529. There are still three CVE which are not addressed yet. The
advisory for CVE-2017-5532 mentions that the solution is to upgrade to
version 6.3.3 or 6.4.2. It is not clear to me whether the Debian
package is actually affected by CVE-2017-5533 or CVE-2017-14941 due to
lack of information.

Markus

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 14:33:57 2019; Machine Name: beach

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

jasperreports: CVE-2017-14941, CVE-2017-5533, CVE-2017-5532

Debian Bug report logs - #884131
jasperreports: CVE-2017-14941, CVE-2017-5533, CVE-2017-5532

Vulmon Search

About

Products

Connect

jasperreports: CVE-2017-14941, CVE-2017-5533, CVE-2017-5532

Debian Bug report logs - #884131 jasperreports: CVE-2017-14941, CVE-2017-5533, CVE-2017-5532

Vulmon Search

About

Products

Connect

Debian Bug report logs - #884131
jasperreports: CVE-2017-14941, CVE-2017-5533, CVE-2017-5532