[Git][security-tracker-team/security-tracker][master] Add reference for rationale on scope of CVE-2016-10127

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bd098b5d by Salvatore Bonaccorso at 2018-08-23T18:59:35Z
Add reference for rationale on scope of CVE-2016-10127

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -80325,6 +80325,7 @@ CVE-2016-10127 (PySAML2 allows remote attackers to conduct XML external entity (
 	NOTE: https://github.com/rohe/pysaml2/issues/366
 	NOTE: A proper fix for this issue would be to fix the underlying issue in src:libxml2
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1411794#c12
+	NOTE: http://www.openwall.com/lists/oss-security/2017/01/19/5 (for the scope of the CVE)
 CVE-2016-10149 (XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier ...)
 	{DSA-3759-1}
 	- python-pysaml2 3.0.0-5 (bug #850716)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/bd098b5d9525dbd817291d394b08f66750206037

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/bd098b5d9525dbd817291d394b08f66750206037
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180823/37b3945d/attachment.html>