CVE-2017-1000384

Publication date 15 December 2017

Last updated 4 August 2025

Ubuntu priority

Description

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-16355. Reason: This candidate is a reservation duplicate of CVE-2017-16355. Notes: All CVE users should reference CVE-2017-16355 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Status

Show unmaintained releases

Package	Ubuntu Release	Status
passenger	17.10 artful	Ignored end of life, was needed
	17.04 zesty	Ignored end of life, was needed
	16.04 LTS xenial	Not affected
	14.04 LTS trusty	Not in release
ruby-passenger	17.10 artful	Not in release
	17.04 zesty	Not in release
	16.04 LTS xenial	Not in release
	14.04 LTS trusty	Not in release

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://blog.phusion.nl/2017/10/13/passenger-security-advisory-5-1-11/
https://github.com/phusion/passenger/commit/4043718264095cde6623c2cbe8c644541036d7bf
http://www.openwall.com/lists/oss-security/2017/11/21/2 and following.
https://www.cve.org/CVERecord?id=CVE-2017-1000384