[Secure-testing-commits] r34144 - data/CVE

Alessandro Ghedini ghedo at moszumanska.debian.org
Sat May 9 10:44:43 UTC 2015


Author: ghedo
Date: 2015-05-09 10:44:43 +0000 (Sat, 09 May 2015)
New Revision: 34144

Modified:
   data/CVE/list
Log:
icu in wheezy is not affected by CVE-2014-814{6,7}

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-05-09 09:37:51 UTC (rev 34143)
+++ data/CVE/list	2015-05-09 10:44:43 UTC (rev 34144)
@@ -14514,10 +14514,12 @@
 CVE-2014-8147 [Integer overflow]
 	RESERVED
 	- icu 52.1-9 (bug #784773)
+	[wheezy] - icu <not-affected> (Vulnerable code not present)
 	TODO: check + other source packages embedding icu
 CVE-2014-8146 [Heap overflow]
 	RESERVED
 	- icu 52.1-9 (bug #784773)
+	[wheezy] - icu <not-affected> (Vulnerable code not present)
 	TODO: check + other source packages embedding icu
 CVE-2014-8145 (Multiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 ...)
 	{DSA-3112-1 DLA-128-1}




More information about the Secure-testing-commits mailing list