JBoss AS: list known vulnerability

CVE-2015-7501 Warning in JBoss module
2017-03-13 18:45:19 +01:00
parent 665a89c4a4
commit 72619a86c9
2 changed files with 4 additions and 1 deletions
@@ -22,5 +22,8 @@ stdenv.mkDerivation {
    license = licenses.lgpl21;
    maintainers = [ maintainers.sander ];
    platforms = platforms.unix;
+    knownVulnerabilities = [
+      "CVE-2015-7501: remote code execution in apache-commons-collections: InvokerTransformer during deserialisation"
+    ];
  };
 }