[Secure-testing-commits] r46626 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-11-29 06:16:19 +0000 (Tue, 29 Nov 2016)
New Revision: 46626

Modified:
   data/CVE/list
Log:
Add bug reference for CVE-2016-9401

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-11-29 05:32:36 UTC (rev 46625)
+++ data/CVE/list	2016-11-29 06:16:19 UTC (rev 46626)
@@ -1092,6 +1092,7 @@
 	[jessie] - bash <no-dsa> (Minor issue)
 	[wheezy] - bash <no-dsa> (Minor issue)
 	NOTE: Upstream bash considers this issue only to be a bug.
+	NOTE: Proposed patch: https://lists.gnu.org/archive/html/bug-bash/2016-11/msg00116.html
 CVE-2016-9399 [jpc_dec.c:1650: void calcstepsizes(uint_fast16_t, int, uint_fast16_t *): Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 - ((bandno > 0) ? ((bandno + 2) / 3) : (0)))) & (~0x1f))' failed.]
 	RESERVED
 	- jasper <removed> (unimportant)