[Secure-testing-commits] r31073 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Thu Jan 1 06:54:29 UTC 2015


Author: carnil
Date: 2015-01-01 06:54:29 +0000 (Thu, 01 Jan 2015)
New Revision: 31073

Modified:
   data/CVE/list
Log:
Update entry for CVE-2014-9426/{file,php5}

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-01-01 06:48:32 UTC (rev 31072)
+++ data/CVE/list	2015-01-01 06:54:29 UTC (rev 31073)
@@ -1,7 +1,9 @@
 CVE-2014-XXXX [miniunzip directory traversal]
 	- minizip 1.1-4 (low; bug #774321)
 CVE-2014-9426 (The apprentice_load function in libmagic/apprentice.c in the Fileinfo ...)
-	TODO: check
+	- file <unfixed>
+	- php5 <unfixed>
+	NOTE: http://git.php.net/?p=php-src.git;a=commitdiff;h=a72cd07f2983dc43a6bb35209dc4687852e53c09
 CVE-2014-9423
 	RESERVED
 CVE-2014-9422




More information about the Secure-testing-commits mailing list