https://bugzilla.redhat.com/show_bug.cgi?id=2128960
Carl George 🤠 <carl(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |CLOSED
CC| |carl(a)redhat.com
Resolution|--- |NOTABUG
Last Closed| |2023-06-13 03:24:28
--- Comment #3 from Carl George 🤠 <carl(a)redhat.com> ---
Upstream pushed back that this CVE was a duplicate of CVE-2022-40152, which
itself was actually a bug in woodstox, not xstream. The security researcher
agreed. The CVE status has been changed to rejected.
https://github.com/x-stream/xstream/issues/304#issuecomment-1254647926
https://github.com/x-stream/xstream/issues/304#issuecomment-1293654236
https://nvd.nist.gov/vuln/detail/CVE-2022-40154
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2128960
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=rep...