[Secure-testing-commits] r31082 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Fri Jan 2 04:40:24 UTC 2015


Author: carnil
Date: 2015-01-02 04:40:24 +0000 (Fri, 02 Jan 2015)
New Revision: 31082

Modified:
   data/CVE/list
Log:
Update CVE-2014-9426 for file

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-01-02 01:01:37 UTC (rev 31081)
+++ data/CVE/list	2015-01-02 04:40:24 UTC (rev 31082)
@@ -1,7 +1,7 @@
 CVE-2014-XXXX [miniunzip directory traversal]
 	- minizip 1.1-4 (low; bug #774321)
 CVE-2014-9426 (The apprentice_load function in libmagic/apprentice.c in the Fileinfo ...)
-	- file <unfixed>
+	- file <not-affected> (PHP specific modification in libmagic/apprentice.c)
 	- php5 <unfixed>
 	NOTE: http://git.php.net/?p=php-src.git;a=commitdiff;h=a72cd07f2983dc43a6bb35209dc4687852e53c09
 CVE-2014-9423




More information about the Secure-testing-commits mailing list