[Secure-testing-commits] r33183 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Fri Mar 27 08:20:06 UTC 2015


Author: carnil
Date: 2015-03-27 08:20:06 +0000 (Fri, 27 Mar 2015)
New Revision: 33183

Modified:
   data/CVE/list
Log:
Update CVE-2015-2331/libzip

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-03-27 07:15:04 UTC (rev 33182)
+++ data/CVE/list	2015-03-27 08:20:06 UTC (rev 33183)
@@ -973,6 +973,8 @@
 	{DSA-3198-1}
 	- php5 5.6.7+dfsg-1 (bug #780713)
 	- libzip 0.11.2-1.2 (bug #780756)
+	[wheezy] - libzip <not-affected> (Vulnerable code introduced with dded Zip64 support in 0.11)
+	[squeeze] - libzip <not-affected> (Vulnerable code introduced with dded Zip64 support in 0.11)
 	NOTE: https://bugs.php.net/bug.php?id=69253
 	NOTE: https://github.com/php/php-src/commit/ef8fc4b53d92fbfcd8ef1abbd6f2f5fe2c4a11e5
 	NOTE: http://www.openwall.com/lists/oss-security/2015/03/18/1




More information about the Secure-testing-commits mailing list