[Secure-testing-commits] r32605 - data/CVE
Moritz Muehlenhoff
jmm at moszumanska.debian.org
Tue Mar 3 15:54:26 UTC 2015
Author: jmm
Date: 2015-03-03 15:54:25 +0000 (Tue, 03 Mar 2015)
New Revision: 32605
Modified:
data/CVE/list
Log:
one more tiff issue fixed upstream
maven* no-dsa
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2015-03-03 09:47:32 UTC (rev 32604)
+++ data/CVE/list 2015-03-03 15:54:25 UTC (rev 32605)
@@ -143,8 +143,13 @@
TODO: check
CVE-2015-XXXX [maven downloads and runs completely unauthed jars via HTTP]
- maven 3.0.5-3 (bug #779331)
+ [wheezy] - maven <no-dsa> (Minor issue)
- maven2 2.2.1-22 (bug #779337)
+ [wheezy] - maven2 <no-dsa> (Minor issue)
+ [squeeze] - maven2 <no-dsa> (Minor issue)
- maven2-core 2.2.1-17 (bug #779338)
+ [wheezy] - maven2-core <no-dsa> (Minor issue)
+ [squeeze] - maven2-core <no-dsa> (Minor issue)
NOTE: https://jira.codehaus.org/browse/MNG-5672
NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/03/02/5
CVE-2015-XXXX [dcerpc: exit()'s on malloc failure]
@@ -10083,7 +10088,7 @@
NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2493 (thumbnail and tiffcmp)
NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2495 (tiff2pdf)
NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2499 (thumbnail and tiffcmp) [not fixed yet in CVS HEAD]
- NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2501 (tiffdither) [not fixed yet in CVS HEAD]
+ NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2501 (tiffdither)
NOTE: 4.0.3-12.1 fixes all issues except 2499 and 2501
CVE-2014-8127 [out-of-bound reads]
RESERVED
More information about the Secure-testing-commits
mailing list