This is an automated email from the ASF dual-hosted git repository.
scantor pushed a commit to branch xerces-3.2
in repository https://gitbox.apache.org/repos/asf/xerces-c.git
The following commit(s) were added to refs/heads/xerces-3.2 by this push:
new 4bacb7586 Update advisory with some version details.
4bacb7586 is described below
commit 4bacb7586061230dc07751425e693de4041e4f5d
Author: Scott Cantor <canto...@osu.edu>
AuthorDate: Wed Apr 26 16:47:32 2023 -0400
Update advisory with some version details.
---
doc/html/secadv/CVE-2018-1311.txt | 29 +++++++++++++++--------------
1 file changed, 15 insertions(+), 14 deletions(-)
diff --git a/doc/html/secadv/CVE-2018-1311.txt
b/doc/html/secadv/CVE-2018-1311.txt
index 01d384f00..3cc3ebf7b 100644
--- a/doc/html/secadv/CVE-2018-1311.txt
+++ b/doc/html/secadv/CVE-2018-1311.txt
@@ -7,7 +7,8 @@ Severity: High
Vendor: The Apache Software Foundation
-Versions Affected: Apache Xerces-C XML Parser library (all known versions)
+Versions Affected: Apache Xerces-C XML Parser library
+(all known versions including 3.2.0, 3.2.1, 3.2.2, 3.2.3, 3.2.4)
Description: The Xerces-C XML parser contains a use-after-free error
triggered during the scanning of external DTDs.
@@ -33,17 +34,17 @@ http://xerces.apache.org/xerces-c/secadv/CVE-2018-1311.txt
-----BEGIN PGP SIGNATURE-----
-iQIzBAEBCgAdFiEE3KoVAHvtneaQzZUjN4uEVAIneWIFAl34DFIACgkQN4uEVAIn
-eWIbtQ/9Gv7gURR24J5yx+R69O4bnGsgHPaHea7VWh4bs4H/mYli3ewZBwzkuTz1
-+Ib6RN8QXT9FA4+TVBCQua2/EBlpnpNMHPp6+GDWISrPYworJGV9FDrCDfqB+BR2
-Li68pH/wlFgqCLMsdUSm7lKU9n+rflW8kx3AsqBlggcrfGTh7XJaImHelOXuRqw/
-QumnckDQQkEgPHxGVE5h2uYvwj1HsyU/czqqWVAHC1rzdXI9syGGOO9xoNCjB70d
-rMi+XEDTuyzqY6SIjM1NLbFyX8cs9CDM4IhQeG+XNQUE9VnvLu1dHY/IqvS9jDrO
-HD4J0ID/rnbxSou3BTaMKGr/TkJHanniZhXJxZujDI7ksEbMBemB7ROwCcQLQ8Z8
-B3QKfCQwjIGmBMaDafElyrbIp74+Vpq3eY6itFOGCQE7f+rXu3qxEk5njsdBsJYV
-s47v9f0v65O0FE5l7yPi3zhkonCfHaMTw08SboY2YqWJf9A1YJZOs1PF1SNU+D/p
-rM2ydwP5F9OPlwm/uLCfRd+hl2etM0UJBcL1V/tP0ORoEZUF1+ZEZckDQ9Cnr2eY
-6Dgd+dmTk5nxjPmsQZPHb4QXsQHbq1HCU5/oJug56SatJ0H0ffj48XXjd1UlBEIk
-v5Eo3+ahPxXBuSgc77naLcisSy3H3+qL6VDMpq6qK1IC/PXvaz0=
-=zDeT
+iQIzBAEBCgAdFiEE3KoVAHvtneaQzZUjN4uEVAIneWIFAmRJjVUACgkQN4uEVAIn
+eWJStA//aPn5uED9W8Z2ISZszq6eRtdkLIenP1ZalELW8v90bNiwLjZeXiO5vnWI
+OFO/DSgSrem6zHRU2bIOYg8qZeFPc0i/1vtXo0u1qbi84qW9adWi9TVoNUH0xRys
+9NY4I4nVTwQzK1gNCMGR77IC2xj6T/bUsGhfvy7Urp0Y75PWOT+MiM51ibcIb9Kh
+wtuYsfrt14BVYB/GMbg2gMRMVO60ErSHXJ0w6ilwlNrtzXPOvx5HcHAayWGNWzEH
+wqzGPhj866ZlynQzrCkWZ7vDtC+5fY2g0RQ9anALNYQaW/s+jDsLwlyHk+30xMR4
+MKeC8XAI6uftG3/2+pUBiadv9rz+oVAMPnRvlF+A6T0yGdUiXAwchhgWPbK6Efvp
+K7lrrLZsZ62BYRAN+gkM8RBieLnB4e7kzRXnfJ9IYfg+HYVxXVtu9KuZH6TkMaT2
+bOweetaDEDO2JBsoeHBGzqmHaOWFzroo24zA++g4OOxYUNk44s/DoP53oTNg+ehk
+sPmb6j1LSM/VbGrLYXWlW05zGwvpVzt8bfKCwUgY8RXVPQG8WrIgZi0R98Fv8jxN
+qBxvKSDkUKX0TZuypgMRAxTlVPcuhsOBwfw91IdUa89N4AvXuBGYk8Z2sokFuYWz
+nBB/rqD22XR0asMY6r3hVdh20jSjXJFI8Vk3x4QvRTcZhHfnT+I=
+=lxZw
-----END PGP SIGNATURE-----
---------------------------------------------------------------------
To unsubscribe, e-mail: c-dev-unsubscr...@xerces.apache.org
For additional commands, e-mail: c-dev-h...@xerces.apache.org
