[Git][security-tracker-team/security-tracker][master] Make clar status of CVE-2018-11761/tika (and respectively CVE-2018-11796)

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
af213f7a by Salvatore Bonaccorso at 2019-01-21T13:06:33Z
Make clar status of CVE-2018-11761/tika (and respectively CVE-2018-11796)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -36650,7 +36650,7 @@ CVE-2018-11761 (In Apache Tika 0.1 to 1.18, the XML parsers were not configured
 	[jessie] - tika <ignored> (Minor issue)
 	NOTE: https://www.openwall.com/lists/oss-security/2018/09/19/4
 	NOTE: When fixing this issue the fix needs to be made complete to not open
-	NOTE: CVE-2018-11796.
+	NOTE: CVE-2018-11796. The full fix is only in 1.19.1 onwards.
 CVE-2018-11760
 	RESERVED
 CVE-2018-11759 (The Apache Web Server (httpd) specific code that normalised the ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/af213f7a46d257de5b802eba63b7e3808a715f9a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/af213f7a46d257de5b802eba63b7e3808a715f9a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190121/978e89b9/attachment.html>