[Secure-testing-commits] r41530 - data/CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Sat May 7 21:32:42 UTC 2016


Author: jmm
Date: 2016-05-07 21:32:42 +0000 (Sat, 07 May 2016)
New Revision: 41530

Modified:
   data/CVE/list
Log:
bug filed for jackson-dataformat-xml


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-05-07 21:25:53 UTC (rev 41529)
+++ data/CVE/list	2016-05-07 21:32:42 UTC (rev 41530)
@@ -2330,9 +2330,8 @@
 	RESERVED
 CVE-2016-3720 [XmlMapper is vulnerable to XXE attack]
 	RESERVED
-	- jackson-dataformat-xml <unfixed>
+	- jackson-dataformat-xml <unfixed> (bug #823703)
 	NOTE: https://github.com/FasterXML/jackson-dataformat-xml/commit/f0f19a4c924d9db9a1e2830434061c8640092cc0 (2.7.4)
-	TODO: check
 CVE-2016-3719
 	RESERVED
 CVE-2016-3718 (The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x ...)




More information about the Secure-testing-commits mailing list