[Secure-testing-commits] r38762 - data/CVE

Fri Jan 8 05:30:04 UTC 2016

Author: carnil
Date: 2016-01-08 05:30:04 +0000 (Fri, 08 Jan 2016)
New Revision: 38762

Modified:
   data/CVE/list
Log:
Add CVE-2015-8750/dwarfutils

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2016-01-08 04:07:16 UTC (rev 38761)
+++ data/CVE/list	2016-01-08 05:30:04 UTC (rev 38762)
@@ -473,6 +473,11 @@
 	RESERVED
 CVE-2016-1505 [On MS Windows the filesystem backend allows access to the first level of files on a drive.]
 	- radicale <not-affected> (Only an issue on MS Windows)
+CVE-2015-8750
+	- dwarfutils <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1294264
+	NOTE: https://github.com/tomhughes/libdwarf/commit/11750a2838e52953013e3114ef27b3c7b1780697
+	TODO: check
 CVE-2015-8749 [Xen connection password leak in logs via StorageError]
 	- nova <unfixed>
 	NOTE: https://launchpad.net/bugs/1516765


