[Secure-testing-commits] r38444 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-12-20 08:12:21 +0000 (Sun, 20 Dec 2015)
New Revision: 38444

Modified:
   data/CVE/list
Log:
Add references to upstream commits for libnsbmp and libnsgif

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-20 07:25:33 UTC (rev 38443)
+++ data/CVE/list	2015-12-20 08:12:21 UTC (rev 38444)
@@ -5070,25 +5070,25 @@
 	RESERVED
 	- libnsbmp <unfixed>
 	[squeeze] - libnsbmp <no-dsa> (Library not used anywhere in Debian)
-	TODO: check, remove in point updates
+	NOTE: http://source.netsurf-browser.org/libnsbmp.git/commit/?id=041df43bbe273b0829132b0b17d89a69da2927d4
 	- netsurf <unfixed>
 CVE-2015-7507 [out-of-bounds read]
 	RESERVED
 	- libnsbmp <unfixed>
 	[squeeze] - libnsbmp <no-dsa> (Library not used anywhere in Debian)
-	TODO: check, remove in point updates
+	NOTE: http://source.netsurf-browser.org/libnsbmp.git/commit/?id=49427b52ba41a1813e3822301612e2e170107efd
 	- netsurf <unfixed>
 CVE-2015-7506 [out-of-bounds read]
 	RESERVED
 	- libnsgif <unfixed>
 	[squeeze] - libnsgif <no-dsa> (Library not used anywhere in Debian)
-	TODO: check, remove in point updates
+	NOTE: http://source.netsurf-browser.org/libnsgif.git/commit/?id=088fa0819f1aeaf212a95caf7393a38c1640b5f0
 	- netsurf <unfixed>
 CVE-2015-7505 [stack overflow]
 	RESERVED
 	- libnsgif <unfixed>
 	[squeeze] - libnsgif <no-dsa> (Library not used anywhere in Debian)
-	TODO: check, remove in point updates
+	NOTE: http://source.netsurf-browser.org/libnsgif.git/commit/?id=a268d2c15252ac58c19f1b19771822c66bcf73b2
 	- netsurf <unfixed>
 CVE-2015-7504 [net: pcnet: heap overflow vulnerability in loopback mode]
 	RESERVED