[Secure-testing-commits] r32601 - data/CVE

Tue Mar 3 06:37:11 UTC 2015

Author: jmm
Date: 2015-03-03 06:37:10 +0000 (Tue, 03 Mar 2015)
New Revision: 32601

Modified:
   data/CVE/list
Log:
yet another maven pkg


Modified: data/CVE/list
===================================================================

--- data/CVE/list	2015-03-03 06:35:39 UTC (rev 32600)
+++ data/CVE/list	2015-03-03 06:37:10 UTC (rev 32601)
@@ -4,6 +4,7 @@
 CVE-2015-XXXX [maven downloads and runs completely unauthed jars via HTTP]
 	- maven 3.0.5-3 (bug #779331)
 	- maven2 2.2.1-22 (bug #779337)
+	- maven2-core 2.2.1-17 (bug #779338)
 	NOTE: https://jira.codehaus.org/browse/MNG-5672
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/03/02/5
 CVE-2015-XXXX [dcerpc: exit()'s on malloc failure]


