[Secure-testing-commits] r32235 - data/CVE

[Luciano Bello]

Author: luciano
Date: 2015-02-14 15:31:46 +0000 (Sat, 14 Feb 2015)
New Revision: 32235

Modified:
   data/CVE/list
Log:
news on regex issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-02-14 15:22:56 UTC (rev 32234)
+++ data/CVE/list	2015-02-14 15:31:46 UTC (rev 32235)
@@ -66,12 +66,12 @@
 	- llvm-toolchain-3.5 <unfixed> (bug #778392)
 	- llvm-toolchain-3.6 <unfixed> (bug #778393)
 	- llvm-toolchain-snapshot <unfixed> (bug #778394)
-	- haskell-regex-posix <unfixed> (bug #778395)
+	- haskell-regex-posix <not-affected> (bug #778395 ; only when building on windows)
 	- cups <unfixed> (bug #778396)
 	- librcsb-core-wrapper <unfixed> (bug #778397)
 	- openrpt <unfixed> (bug #778398)
 	- z88dk <unfixed> (bug #778399)
-	- newlib <unfixed> 
+	- newlib <unfixed> (bug #778408)
 	- yap <unfixed> 
 	- vnc4 <unfixed> (bug #778403) 
 	- sma <unfixed>
@@ -81,7 +81,7 @@
 	- efl <unfixed>
 	- ptlib <unfixed> (bug #778404)
 	- alpine <unfixed>
-	- vigor <unfixed>
+	- vigor <unfixed> (bug #778409)
 	- nvi <unfixed>
 	NOTE: http://www.kb.cert.org/vuls/id/695940
 	NOTE: https://guidovranken.wordpress.com/2015/02/04/full-disclosure-heap-overflow-in-h-spencers-regex-library-on-32-bit-systems/