[Secure-testing-commits] r26002 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Fri Mar 7 07:55:39 UTC 2014


Author: carnil
Date: 2014-03-07 07:55:39 +0000 (Fri, 07 Mar 2014)
New Revision: 26002

Modified:
   data/CVE/list
Log:
Add CVE-2014-0094

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-03-07 07:53:14 UTC (rev 26001)
+++ data/CVE/list	2014-03-07 07:55:39 UTC (rev 26002)
@@ -5682,8 +5682,9 @@
 	RESERVED
 CVE-2014-0095
 	RESERVED
-CVE-2014-0094
+CVE-2014-0094 [ClassLoader manipulation via request parameters]
 	RESERVED
+	- libstruts1.2-java <not-affected> (Affects Struts 2.0.0 - Struts 2.3.16)
 CVE-2014-0093
 	RESERVED
 	NOT-FOR-US: JBoss EAP




More information about the Secure-testing-commits mailing list