[Git][security-tracker-team/security-tracker][master] Track fixed version for axis via unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7042f9b7 by Salvatore Bonaccorso at 2026-10-20T12:43:43+02:00
Track fixed version for axis via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -484925,7 +484925,7 @@ CVE-2023-31242 (An authentication bypass vulnerability exists in the OAS Engine
 CVE-2023-2453 (There is insufficient sanitization of tainted file names that are dire ...)
 	NOT-FOR-US: PHP-Fusion
 CVE-2023-51441 (** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerabilit ...)
-	- axis <unfixed> (bug #1060169)
+	- axis 1.4-30 (bug #1060169)
 	[trixie] - axis <ignored> (Minor issue)
 	[bookworm] - axis <ignored> (Minor issue)
 	[bullseye] - axis <no-dsa> (Minor issue)
@@ -821967,7 +821967,7 @@ CVE-2019-0228 (Apache PDFBox 2.0.14 does not properly initialize the XML parser,
 	NOTE: https://issues.apache.org/jira/browse/PDFBOX-4505
 	NOTE: Fixed by: https://svn.apache.org/r1856952 (2.0.15)
 CVE-2019-0227 (A Server Side Request Forgery (SSRF) vulnerability affected the Apache ...)
-	- axis <unfixed> (bug #929266; unimportant)
+	- axis 1.4-30 (bug #929266; unimportant)
 	NOTE: https://rhinosecuritylabs.com/application-security/cve-2019-0227-expired-domain-rce-apache-axis/
 	NOTE: https://github.com/apache/axis1-java/commit/7043f1ab0397d1ae35f879f2bcc99be1e9b55644
 	NOTE: StockQuoteService.jws not present in Debian binary packages



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7042f9b7ce1a547929940718d64d18e730f8ecf7

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7042f9b7ce1a547929940718d64d18e730f8ecf7
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261020/b02e0b53/attachment.htm>