[Secure-testing-commits] r32605 - data/CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Tue Mar 3 15:54:26 UTC 2015


Author: jmm
Date: 2015-03-03 15:54:25 +0000 (Tue, 03 Mar 2015)
New Revision: 32605

Modified:
   data/CVE/list
Log:
one more tiff issue fixed upstream
maven* no-dsa


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-03-03 09:47:32 UTC (rev 32604)
+++ data/CVE/list	2015-03-03 15:54:25 UTC (rev 32605)
@@ -143,8 +143,13 @@
 	TODO: check
 CVE-2015-XXXX [maven downloads and runs completely unauthed jars via HTTP]
 	- maven 3.0.5-3 (bug #779331)
+	[wheezy] - maven <no-dsa> (Minor issue)
 	- maven2 2.2.1-22 (bug #779337)
+	[wheezy] - maven2 <no-dsa> (Minor issue)
+	[squeeze] - maven2 <no-dsa> (Minor issue)
 	- maven2-core 2.2.1-17 (bug #779338)
+	[wheezy] - maven2-core <no-dsa> (Minor issue)
+	[squeeze] - maven2-core <no-dsa> (Minor issue)
 	NOTE: https://jira.codehaus.org/browse/MNG-5672
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/03/02/5
 CVE-2015-XXXX [dcerpc: exit()'s on malloc failure]
@@ -10083,7 +10088,7 @@
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2493 (thumbnail and tiffcmp)
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2495 (tiff2pdf)
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2499 (thumbnail and tiffcmp) [not fixed yet in CVS HEAD]
-	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2501 (tiffdither) [not fixed yet in CVS HEAD]
+	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2501 (tiffdither)
 	NOTE: 4.0.3-12.1 fixes all issues except 2499 and 2501
 CVE-2014-8127 [out-of-bound reads]
 	RESERVED




More information about the Secure-testing-commits mailing list