[Secure-testing-commits] r42325 - data/CVE

Luciano Bello luciano at moszumanska.debian.org
Sun Jun 5 13:38:35 UTC 2016


Author: luciano
Date: 2016-06-05 13:38:35 +0000 (Sun, 05 Jun 2016)
New Revision: 42325

Modified:
   data/CVE/list
Log:
CVE-2013-0340 does not affect 2.1.1 or larger

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-06-05 12:47:48 UTC (rev 42324)
+++ data/CVE/list	2016-06-05 13:38:35 UTC (rev 42325)
@@ -86304,7 +86304,7 @@
 CVE-2013-0341 [external entity expansion]
 	REJECTED
 CVE-2013-0340 (expat 2.1.0 and earlier does not properly handle entities expansion ...)
-	- expat <unfixed> (unimportant)
+	- expat 2.1.1-1 (unimportant)
 	NOTE: Expat provides API to mitigate expansion attacks, ultimately under control of the app using Expat
 CVE-2013-0339 (libxml2 through 2.9.1 does not properly handle external entities ...)
 	{DSA-2652-1}




More information about the Secure-testing-commits mailing list