[Secure-testing-commits] r29473 - data/CVE

[Thijs Kinkhorst]

Author: thijs
Date: 2014-10-17 13:58:28 +0000 (Fri, 17 Oct 2014)
New Revision: 29473

Modified:
   data/CVE/list
Log:
new libxml2 issue published by ncsc


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-10-17 13:29:28 UTC (rev 29472)
+++ data/CVE/list	2014-10-17 13:58:28 UTC (rev 29473)
@@ -10548,8 +10548,11 @@
 CVE-2014-3661 [SECURITY-87: anonymous DoS attack through CLI handshake]
 	RESERVED
 	- jenkins 1.565.3-1 (bug #763899)
-CVE-2014-3660
+CVE-2014-3660 [libxml2 billion laugh variant]
 	RESERVED
+	- libxml2 <unfixed>
+	NOTE: https://www.ncsc.nl/actueel/nieuwsberichten/kwetsbaarheid-ontdekt-in-libxml2.html
+	NOTE: https://git.gnome.org/browse/libxml2/commit/?id=be2a7edaf289c5da74a4f9ed3a0b6c733e775230
 CVE-2014-3659
 	REJECTED
 CVE-2014-3658