Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e44d4342 by Salvatore Bonaccorso at 2020-12-11T21:20:15+01:00
Consider CVE-2018-1311 as fixed with the Red Hat patch
Although the Red Hat fix has issues (as discussed in the upstream issue
and in #947431) there will unlikely be a fix anytime soon upstream
properly.
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -184691,7 +184691,7 @@ CVE-2018-1312 (In Apache httpd 2.2.0 to 2.4.29, when
generating an HTTP Digest a
- apache2 2.4.33-1
NOTE: https://www.openwall.com/lists/oss-security/2018/03/24/7
CVE-2018-1311 (The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a
use-after-fre ...)
- - xerces-c <unfixed> (bug #947431)
+ - xerces-c 3.2.3+debian-2 (bug #947431)
[buster] - xerces-c <postponed> (Minor issue, revisit when fixed
upstream)
[stretch] - xerces-c <postponed> (Minor issue, revisit when fixed
upstream)
[jessie] - xerces-c <postponed> (slow upstream interest, proper fix
likely to break ABI compatibility)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e44d434253452f52d102a8e7c60e710b8011ac2b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e44d434253452f52d102a8e7c60e710b8011ac2b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
