[Secure-testing-commits] r31624 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-01-24 06:38:14 +0000 (Sat, 24 Jan 2015)
New Revision: 31624

Modified:
   data/CVE/list
Log:
Add CVE-2015-0232/php5

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-01-24 06:35:19 UTC (rev 31623)
+++ data/CVE/list	2015-01-24 06:38:14 UTC (rev 31624)
@@ -4612,8 +4612,11 @@
 	RESERVED
 	- 389-admin <unfixed> (unimportant)
 	NOTE: Rendered unexploitable by /tmp hardening in Debian kernel
-CVE-2015-0232
+CVE-2015-0232 [Free called on unitialized pointer in exif.c]
 	RESERVED
+	- php5 <unfixed>
+	NOTE: https://bugs.php.net/patch-display.php?bug=68799&patch=bug68799fix&revision=1420966468
+	NOTE: https://bugs.php.net/bug.php?id=68799
 CVE-2015-0231 [use after free vulnerability in unserialize() (inclomplete fix of CVE-2014-8142)]
 	RESERVED
 	- php5 <unfixed>