[Secure-testing-commits] r39041 - data/CVE

Wed Jan 20 12:41:12 UTC 2016

Author: alteholz
Date: 2016-01-20 12:41:12 +0000 (Wed, 20 Jan 2016)
New Revision: 39041

Modified:
   data/CVE/list
Log:
php5 in Squeeze not affected by CVE-2016-1904

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2016-01-20 12:39:16 UTC (rev 39040)
+++ data/CVE/list	2016-01-20 12:41:12 UTC (rev 39041)
@@ -48,6 +48,7 @@
 	- php5 <undetermined>
 	- php5.6 <undetermined>
 	- php7.0 7.0.2-1
+	[squeeze] - php5 <not-affected> (Vulnerable code not present, already using safe_emalloc() in php_escape_shell_cmd())
 	NOTE: https://bugs.php.net/bug.php?id=71270
 	NOTE: https://github.com/php/php-src/commit/2871c70efaaaa0f102557a17c727fd4d5204dd4b
 	TODO: check


