[Secure-testing-commits] r27651 - data/CVE

Tue Jul 8 17:39:06 UTC 2014

Author: carnil
Date: 2014-07-08 17:39:06 +0000 (Tue, 08 Jul 2014)
New Revision: 27651

Modified:
   data/CVE/list
Log:
Add temporary item for zendframework

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2014-07-08 17:13:30 UTC (rev 27650)
+++ data/CVE/list	2014-07-08 17:39:06 UTC (rev 27651)
@@ -1,3 +1,7 @@
+CVE-2014-XXXX [ZF2014-04: Potential SQL injection in the ORDER implementation of Zend_Db_Select]
+	- zendframework <unfixed> (bug #754201)
+	NOTE: http://framework.zend.com/security/advisory/ZF2014-04
+	NOTE: https://github.com/zendframework/zf1/commit/da09186c60b9168520e994af4253fba9c19c2b3d
 CVE-2014-4720 (Email::Address module before 1.904 for Perl uses an inefficient ...)
 	{DSA-2969-1}
 	- libemail-address-perl 1.905-1


