[Secure-testing-commits] r27263 - data/CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Fri Jun 13 12:45:41 UTC 2014


Author: jmm
Date: 2014-06-13 12:45:41 +0000 (Fri, 13 Jun 2014)
New Revision: 27263

Modified:
   data/CVE/list
Log:
new asterisk issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-06-13 12:09:05 UTC (rev 27262)
+++ data/CVE/list	2014-06-13 12:45:41 UTC (rev 27263)
@@ -1,6 +1,9 @@
 CVE-2014-4049 [PHP heap-based buffer overflow in DNS TXT record parsing]
 	- php5 <unfixed> (bug #751364)
 	NOTE: https://github.com/php/php-src/commit/b34d7849ed90ced9345f8ea1c59bc8d101c18468
+CVE-2014-4047
+	- asterisk <unfixed> (low)
+	[squeeze] - asterisk <end-of-life> (Unsupported in squeeze-lts)
 CVE-2014-4045 [remote crash in PJSIP Channel Drivers Publish/Subscribe Framework]
 	- asterisk <not-affected> (Only affects Asterisk 12.x)
 	NOTE: http://downloads.asterisk.org/pub/security/AST-2014-005.html




More information about the Secure-testing-commits mailing list