[Secure-testing-commits] r42440 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-06-10 15:44:39 +0000 (Fri, 10 Jun 2016)
New Revision: 42440

Modified:
   data/CVE/list
Log:
Add note for CVE-2016-457{0,1}/mxml

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-06-10 15:43:35 UTC (rev 42439)
+++ data/CVE/list	2016-06-10 15:44:39 UTC (rev 42440)
@@ -2418,12 +2418,14 @@
 	[jessie] - mxml <no-dsa> (Minor issue)
 	[wheezy] - mxml <no-dsa> (Minor issue)
 	NOTE: http://www.openwall.com/lists/oss-security/2016/05/07/8
+	NOTE: Applied patch in 2.9-1 seems not to fix the issue, asked uploader
 CVE-2016-4571 [Recursion using mxml_write_node at mxml-file.c:2739 (stack-exhaustion-2.xml)]
 	RESERVED
 	- mxml <unfixed> (bug #825855)
 	[jessie] - mxml <no-dsa> (Minor issue)
 	[wheezy] - mxml <no-dsa> (Minor issue)
 	NOTE: http://www.openwall.com/lists/oss-security/2016/05/07/8
+	NOTE: Applied patch in 2.9-1 seems not to fix the issue, asked uploader
 CVE-2016-4558 (The BPF subsystem in the Linux kernel before 4.5.5 mishandles ...)
 	- linux 4.5.3-1
 	NOTE: Fixed by: https://git.kernel.org/linus/92117d8443bc5afacc8d5ba82e541946310f106e