[Git][security-tracker-team/security-tracker][master] Mark CVE-2019-15903 as unimportant for chromium

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2876c2c0 by Salvatore Bonaccorso at 2019-11-10T08:15:50Z
Mark CVE-2019-15903 as unimportant for chromium

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -10669,7 +10669,7 @@ CVE-2019-15903 (In libexpat before 2.2.8, crafted XML input could fool the parse
 	- expat 2.2.7-2 (bug #939394)
 	- firefox 70.0-1
 	- firefox-esr 68.2.0esr-1
-	- chromium <not-affected> (uses system expat library)
+	- chromium <unfixed> (unimportant)
 	- thunderbird 1:68.2.1-1
 	NOTE: https://github.com/libexpat/libexpat/commit/c20b758c332d9a13afbbb276d30db1d183a85d43
 	NOTE: https://github.com/libexpat/libexpat/issues/317
@@ -10677,6 +10677,7 @@ CVE-2019-15903 (In libexpat before 2.2.8, crafted XML input could fool the parse
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2019-34/#CVE-2019-15903
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2019-33/#CVE-2019-15903
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2019-35/#CVE-2019-15903
+	NOTE: src:hromium uses the system expat library.
 CVE-2019-15902 (A backporting error was discovered in the Linux stable/longterm kernel ...)
 	{DSA-4531-1 DLA-1940-1}
 	- linux <unfixed>



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2876c2c0db1bb513fa59e1d5914bd020f086728e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/2876c2c0db1bb513fa59e1d5914bd020f086728e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191110/1332f174/attachment.html>