[Git][security-tracker-team/security-tracker][master] Track fixed version for expat issues via unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9c6a91db by Salvatore Bonaccorso at 2022-02-19T08:47:24+01:00
Track fixed version for expat issues via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -67,15 +67,15 @@ CVE-2022-0676
 CVE-2022-0675
 	RESERVED
 CVE-2022-25315 (In Expat (aka libexpat) before 2.4.5, there is an integer overflow in  ...)
-	- expat <unfixed>
+	- expat 2.4.5-1
 	NOTE: https://github.com/libexpat/libexpat/pull/559
 	NOTE: https://github.com/libexpat/libexpat/commit/eb0362808b4f9f1e2345a0cf203b8cc196d776d9
 CVE-2022-25314 (In Expat (aka libexpat) before 2.4.5, there is an integer overflow in  ...)
-	- expat <unfixed>
+	- expat 2.4.5-1
 	NOTE: https://github.com/libexpat/libexpat/pull/560
 	NOTE: https://github.com/libexpat/libexpat/commit/efcb347440ade24b9f1054671e6bd05e60b4cafd
 CVE-2022-25313 (In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack ex ...)
-	- expat <unfixed>
+	- expat 2.4.5-1
 	NOTE: https://github.com/libexpat/libexpat/pull/558
 	NOTE: https://github.com/libexpat/libexpat/commit/9b4ce651b26557f16103c3a366c91934ecd439ab
 CVE-2022-25311
@@ -357,13 +357,13 @@ CVE-2022-25238
 CVE-2022-25237
 	RESERVED
 CVE-2022-25236 (xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to in ...)
-	- expat <unfixed> (bug #1005895)
+	- expat 2.4.5-1 (bug #1005895)
 	NOTE: https://github.com/libexpat/libexpat/pull/561
 	NOTE: https://github.com/libexpat/libexpat/commit/6881a4fc8596307ab9ff2e85e605afa2e413ab71
 	NOTE: https://github.com/libexpat/libexpat/commit/a2fe525e660badd64b6c557c2b1ec26ddc07f6e4
 	NOTE: https://github.com/libexpat/libexpat/commit/2de077423fb22750ebea599677d523b53cb93b1d
 CVE-2022-25235 (xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain valid ...)
-	- expat <unfixed> (bug #1005894)
+	- expat 2.4.5-1 (bug #1005894)
 	NOTE: https://github.com/libexpat/libexpat/pull/562
 	NOTE: https://github.com/libexpat/libexpat/commit/ee2a5b50e7d1940ba8745715b62ceb9efd3a96da
 	NOTE: https://github.com/libexpat/libexpat/commit/3f0a0cb644438d4d8e3294cd0b1245d0edb0c6c6



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9c6a91dbcb7ec18d579e1463bfadd5c8fbf29724

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9c6a91dbcb7ec18d579e1463bfadd5c8fbf29724
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220219/7d3e2552/attachment.htm>