[Secure-testing-commits] r44066 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-08-19 19:43:23 +0000 (Fri, 19 Aug 2016)
New Revision: 44066

Modified:
   data/CVE/list
Log:
Update information for chicken issues, add bug report #834845

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-08-19 19:28:26 UTC (rev 44065)
+++ data/CVE/list	2016-08-19 19:43:23 UTC (rev 44066)
@@ -39,13 +39,14 @@
 	NOTE: https://blogs.gentoo.org/ago/2016/08/07/libav-heap-based-buffer-overflow-in-ff_audio_resample-resample-c/
 	NOTE: https://git.libav.org/?p=libav.git;a=commit;h=0ac8ff618c5e6d878c547a8877e714ed728950ce
 	NOTE: Claimed to not affect ffmpeg
-CVE-2016-6831 [memory leak]
-	- chicken <unfixed>
+CVE-2016-6831 [Memory leak in CHICKEN Scheme's process-execute and process-spawn procedures]
+	- chicken <unfixed> (bug #834845)
 	NOTE: Fixed in the same upstream patch which is provided for CVE-2016-6830
-CVE-2016-6830 [buffer overrun]
-	- chicken <unfixed>
+CVE-2016-6830 [Buffer overrun in CHICKEN Scheme's "process-execute" and "process-spawn" procedures from the posix unit]
+	- chicken <unfixed> (bug #834845)
 	NOTE: http://lists.nongnu.org/archive/html/chicken-announce/2016-08/msg00001.html
 	NOTE: https://lists.nongnu.org/archive/html/chicken-hackers/2016-07/txtSWHYeFeG0R.txt
+	NOTE: http://bugs.call-cc.org/ticket/1308
 CVE-2016-6828 [Linux tcp_xmit_retransmit_queue use after free]
 	- linux <unfixed>
 CVE-2016-6822