[Secure-testing-commits] r32584 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-03-02 18:49:20 +0000 (Mon, 02 Mar 2015)
New Revision: 32584

Modified:
   data/CVE/list
Log:
Add bug references for glibc issues reported

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-03-02 18:21:08 UTC (rev 32583)
+++ data/CVE/list	2015-03-02 18:49:20 UTC (rev 32584)
@@ -88,7 +88,7 @@
 CVE-2014-9685 (Multiple cross-site scripting (XSS) vulnerabilities in Vanilla Forums ...)
 	TODO: check
 CVE-2015-XXXX [potential application crash due to overread in fnmatch]
-	- glibc <unfixed>
+	- glibc <unfixed> (bug #779587)
 	- eglibc <removed>
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=18032
 	NOTE: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=4a28f4d55a6cc33474c0792fe93b5942d81bf185
@@ -176,7 +176,7 @@
 	TODO: check
 CVE-2015-XXXX [_IO_wstr_overflow integer overflow]
 	- eglibc <removed>
-	- glibc <unfixed>
+	- glibc <unfixed> (bug #779587)
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=17269
 	NOTE: Fixed by: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=bdf1ff052a8e23d637f2c838fa5642d78fcedc33
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/02/22/15
@@ -9965,7 +9965,7 @@
 	NOT-FOR-US: JBoss Weld
 CVE-2014-8121 [glibc: nss_files file management issue causes Samba infinite loop]
 	RESERVED
-	- glibc <unfixed> (low)
+	- glibc <unfixed> (low; bug #779587)
 	- eglibc <removed> (low)
 CVE-2014-8120 (The agent in Thermostat before 1.0.6, when using unspecified ...)
 	NOT-FOR-US: Thermostat Hotspot instrumentation