[Secure-testing-commits] r27498 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Fri Jun 27 12:18:08 UTC 2014


Author: carnil
Date: 2014-06-27 12:18:08 +0000 (Fri, 27 Jun 2014)
New Revision: 27498

Modified:
   data/CVE/list
Log:
Add CVE-2014-3478/{file,php5}

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-06-27 12:16:29 UTC (rev 27497)
+++ data/CVE/list	2014-06-27 12:18:08 UTC (rev 27498)
@@ -2554,8 +2554,12 @@
 	NOTE: https://github.com/file/file/commit/36fadd29849b8087af9f4586f89dbf74ea45be67
 	- php5 5.6.0~rc1+dfsg-1
 	NOTE: https://bugs.php.net/bug.php?id=67411
-CVE-2014-3478
+CVE-2014-3478 [mconvert incorrect handling of truncated pascal string size]
 	RESERVED
+	- file 1:5.19-1
+	NOTE: https://github.com/file/file/commit/27a14bc7ba285a0a5ebfdb55e54001aa11932b08
+	- php5 5.6.0~rc1+dfsg-1
+	NOTE: http://bugs.php.net/bug.php?id=67410
 CVE-2014-3477
 	RESERVED
 	- dbus 1.8.4-1 (low)




More information about the Secure-testing-commits mailing list