[Secure-testing-commits] r32771 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-03-11 06:15:20 +0000 (Wed, 11 Mar 2015)
New Revision: 32771

Modified:
   data/CVE/list
Log:
Add CVE-2014-9488/less

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-03-11 06:04:28 UTC (rev 32770)
+++ data/CVE/list	2015-03-11 06:15:20 UTC (rev 32771)
@@ -5107,8 +5107,10 @@
 	NOT-FOR-US: illumos
 CVE-2014-9490 (The numtok function in lib/raven/okjson.rb in the raven-ruby gem ...)
 	NOT-FOR-US: raven ruby gem
-CVE-2014-9488
+CVE-2014-9488 [buffer overflow with invalid UTF-8]
 	RESERVED
+	- less <unfixed>
+	NOTE: http://www.openwall.com/lists/oss-security/2015/03/10/14
 CVE-2014-9484
 	RESERVED
 CVE-2014-9473 (Unrestricted file upload vulnerability in lib_nonajax.php in the ...)