[Secure-testing-commits] r41576 - data/CVE

Mon May 9 18:46:15 UTC 2016

Author: lamby
Date: 2016-05-09 18:46:15 +0000 (Mon, 09 May 2016)
New Revision: 41576

Modified:
   data/CVE/list
Log:
libjackson-json-java is also vulnerable, at least for the JSONP part

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2016-05-09 18:33:22 UTC (rev 41575)
+++ data/CVE/list	2016-05-09 18:46:15 UTC (rev 41576)
@@ -23455,6 +23455,7 @@
 CVE-2015-5211
 	RESERVED
 	- libspring-java <unfixed>
+	- libjackson-json-java <unfixed>
 	NOTE: https://jira.spring.io/browse/SPR-13548
 	NOTE: https://github.com/spring-projects/spring-framework/commit/2bd1da
 	NOTE: https://github.com/spring-projects/spring-framework/commit/a95c3d


