[Secure-testing-commits] r31956 - data/CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Wed Feb 4 08:39:46 UTC 2015


Author: jmm
Date: 2015-02-04 08:39:46 +0000 (Wed, 04 Feb 2015)
New Revision: 31956

Modified:
   data/CVE/list
Log:
drop php issue to-be-rejected


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-02-04 08:26:20 UTC (rev 31955)
+++ data/CVE/list	2015-02-04 08:39:46 UTC (rev 31956)
@@ -3038,11 +3038,7 @@
 	RESERVED
 	- minizip 1.1-5 (low; bug #774321)
 CVE-2014-9426 (** DISPUTED ** The apprentice_load function in libmagic/apprentice.c ...)
-	- file <not-affected> (PHP specific modification in libmagic/apprentice.c)
-	- php5 <unfixed>
-	[wheezy] - php5 <not-affected> (libmagic/apprentice.c does not contain the invalid free)
-	[squeeze] - php5 <not-affected> (libmagic/apprentice.c does not contain the invalid free)
-	NOTE: http://git.php.net/?p=php-src.git;a=commitdiff;h=a72cd07f2983dc43a6bb35209dc4687852e53c09
+	NOTE: Disputed PHP issue to be rejected, code wasn't present in squeeze/wheezy or file (PHP-specific)
 CVE-2014-9423
 	RESERVED
 	{DSA-3153-1}




More information about the Secure-testing-commits mailing list