[Secure-testing-commits] r32599 - data/CVE

Tue Mar 3 06:14:34 UTC 2015

Author: jmm
Date: 2015-03-03 06:14:34 +0000 (Tue, 03 Mar 2015)
New Revision: 32599

Modified:
   data/CVE/list
Log:
maven bug also affects maven2


Modified: data/CVE/list
===================================================================

--- data/CVE/list	2015-03-03 06:13:47 UTC (rev 32598)
+++ data/CVE/list	2015-03-03 06:14:34 UTC (rev 32599)
@@ -3,6 +3,7 @@
 	TODO: check
 CVE-2015-XXXX [maven downloads and runs completely unauthed jars via HTTP]
 	- maven 3.0.5-3 (bug #779331)
+	- maven2 2.2.1-22 (bug #779337)
 	NOTE: https://jira.codehaus.org/browse/MNG-5672
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/03/02/5
 CVE-2015-XXXX [dcerpc: exit()'s on malloc failure]


