[Git][security-tracker-team/security-tracker][master] CVE-2018-8014,tomcat7: Wheezy is not affected

[Markus Koschany]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6af9e6e1 by Markus Koschany at 2018-05-22T20:11:28+02:00
CVE-2018-8014,tomcat7: Wheezy is not affected

The vulnerable code (CORS)-filter is not present.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -8044,6 +8044,7 @@ CVE-2018-8014 (The defaults settings for the CORS filter provided in Apache Tomc
 	NOTE: tomcat8.0 builds only tomcat8.0-user and libtomcat8.0-java
 	- tomcat7 7.0.72-3
 	[jessie] - tomcat7 <no-dsa> (Minor issue; user expected to configure filters appropriately)
+	[wheezy] - tomcat7 <not-affected> (vulnerable code not present)
 	NOTE: Since 7.0.72-3, src:tomcat7 only builds the Servlet API
 	NOTE: https://svn.apache.org/r1831728 (8.5.x)
 	NOTE: https://svn.apache.org/r1831729 (8.0.x)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6af9e6e1772870a2acace4076fe06ce7b2af5aee

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/6af9e6e1772870a2acace4076fe06ce7b2af5aee
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180522/6a220f97/attachment.html>