https://bugzilla.redhat.com/show_bug.cgi?id=2134303
Carl George 🤠 <carl(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |CLOSED
Resolution|--- |NOTABUG
CC| |carl(a)redhat.com
Last Closed| |2023-06-13 03:19:54
--- Comment #2 from Carl George 🤠 <carl(a)redhat.com> ---
Upstream pushed back that this CVE was actually a bug in woodstox, not xstream.
The security researcher agreed. The CVE has been updated to reflect this.
https://github.com/x-stream/xstream/issues/304#issuecomment-1254647926
https://github.com/x-stream/xstream/issues/304#issuecomment-1293654236
https://nvd.nist.gov/vuln/detail/CVE-2022-40152
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2134303
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=rep...