[Git][security-tracker-team/security-tracker][master] Mark CVE-2018-11803/subversion as not affected for stretch and earlier

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
400f0da1 by Salvatore Bonaccorso at 2019-01-23T14:30:02Z
Mark CVE-2018-11803/subversion as not affected for stretch and earlier

Vulnerable code (server-side support for recursive directory listing
operations) was introduced in 1.10.0 only and the respective issue was
only affecting buster and sid.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -36980,6 +36980,8 @@ CVE-2018-11804 (Spark's Apache Maven-based build includes a convenience script,
 CVE-2018-11803
 	RESERVED
 	- subversion 1.10.4-1
+	[stretch] - subversion <not-affected> (Vulnerable code introduced in 1.10.0)
+	[jessie] - subversion <not-affected> (Vulnerable code introduced in 1.10.0)
 	NOTE: https://subversion.apache.org/security/CVE-2018-11803-advisory.txt
 	NOTE: https://www.openwall.com/lists/oss-security/2019/01/23/1
 CVE-2018-11802



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/400f0da1e1c87e5bb83f584ccdf25125f2fdb9c9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/400f0da1e1c87e5bb83f584ccdf25125f2fdb9c9
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190123/e3f43b64/attachment.html>