[Secure-testing-commits] r32841 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Fri Mar 13 07:08:25 UTC 2015


Author: carnil
Date: 2015-03-13 07:07:52 +0000 (Fri, 13 Mar 2015)
New Revision: 32841

Modified:
   data/CVE/list
Log:
Add reference for CVE-2015-1796/libopensaml2-java

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-03-13 06:00:10 UTC (rev 32840)
+++ data/CVE/list	2015-03-13 07:07:52 UTC (rev 32841)
@@ -1167,6 +1167,7 @@
 CVE-2015-1796 [PKIX Trust Engines Exhibit Critical Flaw In Trusted Names Evaluation]
 	RESERVED
 	- libopensaml2-java <unfixed>
+	NOTE: Only change between 2.6.4 and 2.6.5 seems  http://svn.shibboleth.net/view/java-opensaml2/branches/REL_2/src/main/java/org/opensaml/saml2/metadata/provider/AbstractReloadingMetadataProvider.java?r1=1656&r2=1680
 	NOTE: http://shibboleth.net/community/advisories/secadv_20150225.txt
 	TODO: check
 CVE-2015-1795




More information about the Secure-testing-commits mailing list