[Git][security-tracker-team/security-tracker][master] Consider CVE-2018-1311 as fixed with the Red Hat patch

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e44d4342 by Salvatore Bonaccorso at 2020-12-11T21:20:15+01:00
Consider CVE-2018-1311 as fixed with the Red Hat patch

Although the Red Hat fix has issues (as discussed in the upstream issue
and in #947431) there will unlikely be a fix anytime soon upstream
properly.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -184691,7 +184691,7 @@ CVE-2018-1312 (In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest a
 	- apache2 2.4.33-1
 	NOTE: https://www.openwall.com/lists/oss-security/2018/03/24/7
 CVE-2018-1311 (The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-fre ...)
-	- xerces-c <unfixed> (bug #947431)
+	- xerces-c 3.2.3+debian-2 (bug #947431)
 	[buster] - xerces-c <postponed> (Minor issue, revisit when fixed upstream)
 	[stretch] - xerces-c <postponed> (Minor issue, revisit when fixed upstream)
 	[jessie] - xerces-c <postponed> (slow upstream interest, proper fix likely to break ABI compatibility)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e44d434253452f52d102a8e7c60e710b8011ac2b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e44d434253452f52d102a8e7c60e710b8011ac2b
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20201211/9c206419/attachment.html>