[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] 2 commits: xmltooling DSA

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
944fb4ec by Moritz Muehlenhoff at 2018-01-12T23:11:10+01:00
xmltooling DSA

- - - - -
d8831796 by Moritz Muehlenhoff at 2018-01-12T23:12:14+01:00
Merge branch 'master' of salsa.debian.org:security-tracker-team/security-tracker

- - - - -


2 changed files:

- data/CVE/list
- data/DSA/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -13167,6 +13167,9 @@ CVE-2018-0487
 	RESERVED
 CVE-2018-0486
 	RESERVED
+	- xmltooling <unfixed>
+	[stretch] - xmltooling <not-affected> (Xerces is configured to disallow DTD use)
+	NOTE: https://shibboleth.net/community/advisories/secadv_20180112.txt
 CVE-2017-17026
 	RESERVED
 CVE-2017-17025


=====================================
data/DSA/list
=====================================
--- a/data/DSA/list
+++ b/data/DSA/list
@@ -1,3 +1,6 @@
+[12 Jan 2018] DSA-4085-1 xmltooling - security update
+	{CVE-2018-0486}
+	[jessie] - xmltooling 1.5.3-2+deb8u2
 [12 Jan 2018] DSA-4084-1 gifsicle - security update
 	{CVE-2017-1000421}
 	[jessie] - gifsicle 1.86-1+deb8u1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/7a59a642aaf65168d39c0caff0e179acf409437b...d88317960ef19b3060b42cf0a7f7ef0afa238b55

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/7a59a642aaf65168d39c0caff0e179acf409437b...d88317960ef19b3060b42cf0a7f7ef0afa238b55
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180112/5aa1b35b/attachment.html>