batik: CVE-2019-17566

Debian Bug report logs - #964510
batik: CVE-2019-17566

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Emilio Pozuelo Monfort <pochu@debian.org>

To: submit@bugs.debian.org

Subject: batik: CVE-2019-17566

Date: Wed, 8 Jul 2020 10:10:56 +0200

Package: batik
X-Debbugs-CC: team@security.debian.org
Severity: important
Version: 1.8-4
Tags: security

Hi,

The following vulnerability was published for batik.

CVE-2019-17566[0]: SSRF vulnerability

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

Note that this is fixed upstream in 1.13, and the fix is easy to backport. You
may want to consider fixing this for buster and stretch via the upcoming point
release.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2019-17566
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17566

Please adjust the affected versions in the BTS as needed.

Send a report that this bug log contains spam.