[Secure-testing-commits] r27501 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-06-27 12:31:23 +0000 (Fri, 27 Jun 2014)
New Revision: 27501

Modified:
   data/CVE/list
Log:
Add CVE-2014-0207

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-06-27 12:21:06 UTC (rev 27500)
+++ data/CVE/list	2014-06-27 12:31:23 UTC (rev 27501)
@@ -11604,8 +11604,13 @@
 CVE-2014-0208
 	RESERVED
 	- foreman <itp> (bug #663101)
-CVE-2014-0207
+CVE-2014-0207 [cdf_read_short_sector insufficient boundary check]
 	RESERVED
+	- file 1:5.19-1
+	NOTE: fixed as part of https://github.com/file/file/commit/6d209c1c489457397a5763bca4b28e43aac90391#diff-0
+	- php5 <undetermined>
+	NOTE: https://bugs.php.net/bug.php?id=67326 
+	TODO: check php5
 CVE-2014-0206 (Array index error in the aio_read_events_ring function in fs/aio.c in ...)
 	- linux <unfixed>
 	[wheezy] - linux <not-affected> (introduced by a31ad380bed817aa25f8830ad23e1a0480fef797)