[Secure-testing-commits] r31958 - data/CVE

Moritz Muehlenhoff jmm at moszumanska.debian.org
Wed Feb 4 08:47:22 UTC 2015


Author: jmm
Date: 2015-02-04 08:47:22 +0000 (Wed, 04 Feb 2015)
New Revision: 31958

Modified:
   data/CVE/list
Log:
another php issue resolved


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-02-04 08:43:48 UTC (rev 31957)
+++ data/CVE/list	2015-02-04 08:47:22 UTC (rev 31958)
@@ -3732,12 +3732,13 @@
 	- file 1:5.21+15-1
 	[wheezy] - file <not-affected> (Introduced in 5.16)
 	[squeeze] - file <not-affected> (Introduced in 5.16)
-	- php5 <unfixed>
+	- php5 5.6.5+dfsg-1
 	[wheezy] - php5 <not-affected> (Vulnerable code not present)
 	[squeeze] - php5 <not-affected> (Vulnerable code not present)
 	NOTE: Report: http://mx.gw.com/pipermail/file/2014/001654.html
 	NOTE: Fix: https://github.com/file/file/commit/65437cee25199dbd385fb35901bc0011e164276c
 	NOTE: Introduced by: https://github.com/file/file/commit/c8451af8ab0c2e2a93ce93b9c68257d31576cc85 (5.16)
+	NOTE: readelf.c has been removed in PHP in 5.6.5, see http://php.net/ChangeLog-5.php#5.6.5
 CVE-2014-9494 (RabbitMQ before 3.4.0 allows remote attackers to bypass the ...)
 	- rabbitmq-server 3.4.1-1 (bug #773134)
 	[jessie] - rabbitmq-server 3.3.5-1.1




More information about the Secure-testing-commits mailing list