https://bugzilla.redhat.com/show_bug.cgi?id=2134297
Carl George 🤠 <carl(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |carl(a)redhat.com
Resolution|--- |NOTABUG
Status|NEW |CLOSED
Last Closed| |2023-06-13 03:23:36
--- Comment #2 from Carl George 🤠 <carl(a)redhat.com> ---
Upstream pushed back that this CVE was a duplicate of CVE-2022-40152, which
itself was actually a bug in woodstox, not xstream. The security researcher
agreed. The CVE status has been changed to rejected.
https://github.com/x-stream/xstream/issues/304#issuecomment-1254647926
https://github.com/x-stream/xstream/issues/304#issuecomment-1293654236
https://nvd.nist.gov/vuln/detail/CVE-2022-40156
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2134297
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=rep...