Merge pull request #23674 from c0bw3b/sec/jboss7

JBoss AS: list known vulnerability
2017-03-15 17:33:27 -04:00
parent eba3900781 72619a86c9
commit e4c0613470
2 changed files with 4 additions and 1 deletions
@@ -22,5 +22,8 @@ stdenv.mkDerivation {
    license = licenses.lgpl21;
    maintainers = [ maintainers.sander ];
    platforms = platforms.unix;
+    knownVulnerabilities = [
+      "CVE-2015-7501: remote code execution in apache-commons-collections: InvokerTransformer during deserialisation"
+    ];
  };
 }