[Secure-testing-commits] r32497 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Feb 25 19:07:16 UTC 2015


Author: carnil
Date: 2015-02-25 19:07:16 +0000 (Wed, 25 Feb 2015)
New Revision: 32497

Modified:
   data/CVE/list
Log:
Update entry for CVE-2011-3923, it is for struts

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-02-25 18:53:43 UTC (rev 32496)
+++ data/CVE/list	2015-02-25 19:07:16 UTC (rev 32497)
@@ -70758,7 +70758,6 @@
 CVE-2011-3923 [struts ParameterInterceptor remote code execution]
 	RESERVED
 	- libstruts1.2-java <not-affected> (Only affects 2.x)
-	- libspring-2.5-java <unfixed>
 	NOTE: https://cwiki.apache.org/confluence/display/WW/S2-009
 	NOTE: http://blog.o0o.nu/2012/01/cve-2011-3923-yet-another-struts2.html
 CVE-2011-3922 (Stack-based buffer overflow in Google Chrome before 16.0.912.75 allows ...)




More information about the Secure-testing-commits mailing list