[Secure-testing-commits] r31150 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-01-06 07:08:12 +0000 (Tue, 06 Jan 2015)
New Revision: 31150

Modified:
   data/CVE/list
Log:
Add CVE-2014-9447, but with TODO. Is it a doublicate of  CVE-2014-9486?

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-01-06 06:24:19 UTC (rev 31149)
+++ data/CVE/list	2015-01-06 07:08:12 UTC (rev 31150)
@@ -16,6 +16,10 @@
 	NOT-FOR-US: Mediawiki extension not packaged in src:mediawiki-extensions
 CVE-2014-9477
 	NOT-FOR-US: Mediawiki extension not packaged in src:mediawiki-extensions
+CVE-2014-9447 [directory traversal in read_long_names()]
+	- elfutils <unfixed>
+	NOTE: https://git.fedorahosted.org/cgit/elfutils.git/commit/?id=147018e729e7c22eeabf15b82d26e4bf68a0d18e
+	TODO: check, dublicate of CVE-2014-9486?
 CVE-2015-0552 [directory traversal]
 	- gcab 0.4-2 (bug #774580)
 CVE-2015-XXXX [use after free in seg_write_packet()]