[Secure-testing-commits] r38064 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-12-02 21:38:45 +0000 (Wed, 02 Dec 2015)
New Revision: 38064

Modified:
   data/CVE/list
Log:
Update information for CVE-2015-8388/pcre3

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-02 21:27:19 UTC (rev 38063)
+++ data/CVE/list	2015-12-02 21:38:45 UTC (rev 38064)
@@ -6954,10 +6954,10 @@
 	NOTE: http://vcs.pcre.org/pcre?view=revision&revision=1577
 	TODO: check
 CVE-2015-8388 (PCRE before 8.38 mishandles the /(?=di(?<=(?1))|(?=(.))))/ pattern and ...)
-	- pcre3 <unfixed>
+	- pcre3 2:8.35-7
 	NOTE: Fixed in 8.38
 	NOTE: http://vcs.pcre.org/pcre?view=revision&revision=1571
-	TODO: check
+	TODO: check, duplicate of CVE-2015-5073, check with MITRE
 CVE-2015-8387 (PCRE before 8.38 mishandles (?123) subroutine calls and related ...)
 	- pcre3 <unfixed>
 	[jessie] - pcre3 <no-dsa> (Minor issue)