Bug 534550

Summary:	dev-python/qpid-python: XXE vulnerability (CVE-2014-3629)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED INVALID
Severity:	trivial
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description GLSAMaker/CVETool Bot gentoo-dev

2015-01-04 01:38:00 UTC

CVE-2014-3629 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-3629):
  XML external entity (XXE) vulnerability in the XML Exchange module in Apache
  Qpid 0.30 allows remote attackers to cause outgoing HTTP connections via a
  crafted message.

Comment 1 Matthew Thode ( prometheanfire ) archtester

2015-01-13 04:18:36 UTC

We don't have that version in tree.