[Secure-testing-commits] r28402 - data/CVE

Thu Aug 21 07:12:21 UTC 2014

Author: carnil
Date: 2014-08-21 07:12:21 +0000 (Thu, 21 Aug 2014)
New Revision: 28402

Modified:
   data/CVE/list
Log:
Add temporary item for lua, CVE is requested

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2014-08-21 07:08:52 UTC (rev 28401)
+++ data/CVE/list	2014-08-21 07:12:21 UTC (rev 28402)
@@ -1,3 +1,9 @@
+CVE-2014-XXXX [possible overflow in vararg functions]
+	- lua50 <undetermined>
+	- lua5.1 <unfixed>
+	- lua5.2 <unfixed>
+	NOTE: http://www.lua.org/bugs.html#5.2.2-1
+	TODO: check, reproducer also available
 CVE-2014-5333
 	NOT-FOR-US: Adobe Flash
 	NOTE: assignment not from Adobe, see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-5333


