[Git][security-tracker-team/security-tracker][master] CVE-2022-25314/expat n/a on stretch

[Emilio Pozuelo Monfort (@pochu)]

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
80ef4746 by Emilio Pozuelo Monfort at 2022-03-03T13:19:26+01:00
CVE-2022-25314/expat n/a on stretch

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2647,6 +2647,7 @@ CVE-2022-25315 (In Expat (aka libexpat) before 2.4.5, there is an integer overfl
 CVE-2022-25314 (In Expat (aka libexpat) before 2.4.5, there is an integer overflow in  ...)
 	{DSA-5085-1}
 	- expat 2.4.5-1
+	[stretch] - expat <not-affected> (Vulnerable code introduced later)
 	NOTE: https://github.com/libexpat/libexpat/pull/560
 	NOTE: https://github.com/libexpat/libexpat/commit/efcb347440ade24b9f1054671e6bd05e60b4cafd
 CVE-2022-25313 (In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack ex ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/80ef4746e2192adeccc8e55547ec4b122cb5c814

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/80ef4746e2192adeccc8e55547ec4b122cb5c814
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220303/78ba2dfb/attachment.htm>