[Secure-testing-commits] r32638 - data/CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Wed Mar 4 22:32:07 UTC 2015


Author: jmm
Date: 2015-03-04 22:32:07 +0000 (Wed, 04 Mar 2015)
New Revision: 32638

Modified:
   data/CVE/list
Log:
drop maven entry, no CVE ID will be assigned and fixed anyway


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-03-04 21:10:15 UTC (rev 32637)
+++ data/CVE/list	2015-03-04 22:32:07 UTC (rev 32638)
@@ -227,17 +227,6 @@
 	[squeeze] - bibtool <no-dsa> (Minor issue)
 	[wheezy] - bibtool <no-dsa> (Minor issue)
 	NOTE: Upstream patch: https://github.com/ge-ne/bibtool/commit/c6ed92c556f28ca2c738972c647486f9e11424bf
-CVE-2015-XXXX [maven downloads and runs completely unauthed jars via HTTP]
-	- maven 3.0.5-3 (bug #779331)
-	[wheezy] - maven <no-dsa> (Minor issue)
-	- maven2 2.2.1-22 (bug #779337)
-	[wheezy] - maven2 <no-dsa> (Minor issue)
-	[squeeze] - maven2 <no-dsa> (Minor issue)
-	- maven2-core 2.2.1-17 (bug #779338)
-	[wheezy] - maven2-core <no-dsa> (Minor issue)
-	[squeeze] - maven2-core <no-dsa> (Minor issue)
-	NOTE: https://jira.codehaus.org/browse/MNG-5672
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/03/02/5
 CVE-2015-XXXX [dcerpc: exit()'s on malloc failure]
 	- suricata <unfixed>
 	NOTE: https://github.com/inliniac/suricata/commit/89017d0b03bf715a3f4e11b612c6c7a23549304a




More information about the Secure-testing-commits mailing list