- Packages tracked
- 38,394
- Advisory records
- 728
- Fixed in fork
- 13
- Fixed upstream
- 8
- In flight
- 6
- Awaiting triage
- 700
- Awaiting approval
- 0
1 matching records
| CVE | Project | Title | Fork fix | State | Evidence | Discussion |
|---|---|---|---|---|---|---|
| DEBIAN-CVE-2017-5969 | debian/libxml2 | libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML | - | Awaiting triage | Evidence | None recorded |