[Secure-testing-commits] r27499 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Fri Jun 27 12:19:48 UTC 2014


Author: carnil
Date: 2014-06-27 12:19:48 +0000 (Fri, 27 Jun 2014)
New Revision: 27499

Modified:
   data/CVE/list
Log:
Add CVE-2014-3480/{file,php5}

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-06-27 12:18:08 UTC (rev 27498)
+++ data/CVE/list	2014-06-27 12:19:48 UTC (rev 27499)
@@ -2546,8 +2546,12 @@
 CVE-2014-3481
 	RESERVED
 	- jbossas4 <not-affected> (Only builds a few libraries, not the full application server, #581226)
-CVE-2014-3480
+CVE-2014-3480 [cdf_count_chain insufficient boundary check]
 	RESERVED
+	- file 1:5.19-1
+	NOTE: https://github.com/file/file/commit/40bade80cbe2af1d0b2cd0420cebd5d5905a2382
+	- php5 5.6.0~rc1+dfsg-1
+	NOTE: http://bugs.php.net/bug.php?id=67412
 CVE-2014-3479 [cdf_check_stream_offset insufficient boundary check]
 	RESERVED
 	- file 1:5.19-1




More information about the Secure-testing-commits mailing list