[Secure-testing-commits] r32113 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2015-02-09 15:11:30 +0000 (Mon, 09 Feb 2015)
New Revision: 32113

Modified:
   data/CVE/list
Log:
glibc update


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-02-09 15:10:10 UTC (rev 32112)
+++ data/CVE/list	2015-02-09 15:11:30 UTC (rev 32113)
@@ -3323,10 +3323,12 @@
 	[squeeze] - cabextract <no-dsa> (Minor issue)
 CVE-2012-6686 [unbound alloca use in glob_in_dir]
 	RESERVED
-	- glibc <unfixed>
+	- glibc 2.17-1
 	- eglibc <removed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=797096
-	TODO: check
+	NOTE: https://sourceware.org/git/?p=glibc.git;a=commit;h=f2962a71959fd254a7a223437ca4b63b9e81130c
+	NOTE: https://sourceware.org/git/?p=glibc.git;a=commit;h=34a9094f49241ebb72084c536cf468fd51ebe3ec
+	NOTE: Fixed upstream in 2.14
 CVE-2012-6685 [ruby-nokogiri XXE]
 	RESERVED
 	- ruby-nokogiri 1.5.4-1 (low)