[Secure-testing-commits] r38667 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-01-03 14:25:17 +0000 (Sun, 03 Jan 2016)
New Revision: 38667

Modified:
   data/CVE/list
Log:
Add reference to fedora patch for CVE-2015-5254/activemq

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-01-03 14:14:38 UTC (rev 38666)
+++ data/CVE/list	2016-01-03 14:25:17 UTC (rev 38667)
@@ -12280,6 +12280,7 @@
 	NOTE: http://activemq.apache.org/security-advisories.data/CVE-2015-5254-announcement.txt
 	NOTE: https://git-wip-us.apache.org/repos/asf?p=activemq.git;h=6f03921b31d9fefeddb0f4fa63150ed1f94a14b1 (5.11.x)
 	NOTE: https://git-wip-us.apache.org/repos/asf?p=activemq.git;h=73a0caf758f9e4916783a205c7e422b4db27905c (5.11.x)
+	NOTE: Patch applied to Fedora (5.6.0 based version): http://pkgs.fedoraproject.org/cgit/activemq.git/diff/activemq-5.6.0-CVE-2015-5254.patch?id=e3ef8a1b62d10273a814090be9168aa3019ace72
 	NOTE: https://issues.apache.org/jira/browse/AMQ-6013
 	TODO: check
 CVE-2015-5253 (The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before ...)