[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Mark CVE-2017-12627 as no-dsa as discussed with maintainer

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3472d427 by Salvatore Bonaccorso at 2018-04-04T11:26:35+02:00
Mark CVE-2017-12627 as no-dsa as discussed with maintainer

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -38842,6 +38842,8 @@ CVE-2017-12628 (The JMX server embedded in Apache James, also used by the comman
 CVE-2017-12627 (In Apache Xerces-C XML Parser library before 3.2.1, processing of ...)
 	{DLA-1328-1}
 	- xerces-c 3.2.1+debian-1 (bug #894050)
+	[stretch] - xerces-c <no-dsa> (Minor issue; can be fixed via point release)
+	[jessie] - xerces-c <no-dsa> (Minor issue; can be fixed via point release)
 	NOTE: https://svn.apache.org/viewvc?view=revision&revision=1819998
 	NOTE: https://xerces.apache.org/xerces-c/secadv/CVE-2017-12627.txt
 CVE-2017-12626 (Apache POI in versions prior to release 3.17 are vulnerable to Denial ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3472d4273f5afe9c1416f5d55cda2b23bd5aa943

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/3472d4273f5afe9c1416f5d55cda2b23bd5aa943
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180404/c12f34e9/attachment.html>