[Secure-testing-commits] r35729 - data/CVE

[Luca Bruno]

Author: lucab
Date: 2015-07-27 15:59:00 +0000 (Mon, 27 Jul 2015)
New Revision: 35729

Modified:
   data/CVE/list
Log:
Add upstream dev discussion for CVE-2015-3717/sqlite3

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-07-27 14:31:14 UTC (rev 35728)
+++ data/CVE/list	2015-07-27 15:59:00 UTC (rev 35729)
@@ -4714,6 +4714,7 @@
 CVE-2015-3717 (Multiple buffer overflows in the printf functionality in SQLite, as ...)
 	- sqlite3 <undetermined>
 	NOTE: Might be an Apple-specific CVE
+	NOTE: sqlite-dev thread https://groups.google.com/forum/#!topic/sqlite-dev/U7OjAbZO6LA
 CVE-2015-3716 (Spotlight in Apple OS X before 10.10.4 allows attackers to execute ...)
 	NOT-FOR-US: Apple OS X
 CVE-2015-3715 (The code-signing implementation in Apple OS X before 10.10.4 does not ...)