[Git][security-tracker-team/security-tracker][master] axis/CVE-2019-0227: add patches links

[Sylvain Beucler]

Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c60ab95d by Sylvain Beucler at 2019-04-17T16:24:30Z
axis/CVE-2019-0227: add patches links

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -29910,9 +29910,11 @@ CVE-2019-0227 [Hard coded domain name in example web service named StockQuoteSer
 	RESERVED
 	- axis <unfixed> (unimportant)
 	NOTE: https://rhinosecuritylabs.com/application-security/cve-2019-0227-expired-domain-rce-apache-axis/
+	NOTE: https://github.com/apache/axis1-java/commit/7043f1ab0397d1ae35f879f2bcc99be1e9b55644
 	NOTE: StockQuoteService.jws not present in Debian binary packages
-	NOTE: disclosure mentions "03/12/2019 - Apache applied SSRF patch" but no patch available, requested more info:
+	NOTE: disclosure mentions "03/12/2019 - Apache applied SSRF patch":
 	NOTE: https://github.com/RhinoSecurityLabs/CVEs/issues/1
+	NOTE: https://github.com/apache/axis1-java/commit/35511b872a6460129cfc0cd35baaccbd820977b5
 CVE-2019-0226
 	RESERVED
 CVE-2019-0225 (A specially crafted url could be used to access files under the ROOT d ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/c60ab95ddc1b24e0c5cb4eadf1cdfecb2804b104

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/c60ab95ddc1b24e0c5cb4eadf1cdfecb2804b104
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190417/d4a64567/attachment.html>