[Git][security-tracker-team/security-tracker][master] Mark CVE-2018-20433/c3p0 as no-dsa for stretch

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8f5e6a09 by Salvatore Bonaccorso at 2018-12-27T20:37:52Z
Mark CVE-2018-20433/c3p0 as no-dsa for stretch

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -240,6 +240,7 @@ CVE-2018-20434
 	RESERVED
 CVE-2018-20433 (c3p0 0.9.5.2 allows XXE in extractXmlConfigFromInputStream in ...)
 	- c3p0 0.9.1.2-10 (bug #917257)
+	[stretch] - c3p0 <no-dsa> (Minor issue; can be fixed via point release)
 	NOTE: https://github.com/zhutougg/c3p0/commit/2eb0ea97f745740b18dd45e4a909112d4685f87b
 CVE-2018-20432
 	RESERVED



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8f5e6a09a949123d5a59f7d7f219a4791ddf323c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8f5e6a09a949123d5a59f7d7f219a4791ddf323c
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181227/eed67c8e/attachment.html>