[Secure-testing-commits] r45371 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-10-16 11:49:35 +0000 (Sun, 16 Oct 2016)
New Revision: 45371

Modified:
   data/CVE/list
Log:
Add reference for CVE-2016-8693, not yet fixed upstream

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-10-16 11:48:47 UTC (rev 45370)
+++ data/CVE/list	2016-10-16 11:49:35 UTC (rev 45371)
@@ -45,6 +45,7 @@
 	TODO: check
 CVE-2016-8693 [attempting double-free ... mem_close ... jas_stream.c]
 	- jasper <unfixed>
+	NOTE: https://blogs.gentoo.org/ago/2016/10/16/jasper-double-free-in-mem_close-jas_stream-c/
 CVE-2016-8692 [FPE on unknown address ... jpc_dec_process_siz ... jpc_dec.c]
 	- jasper <unfixed>
 	NOTE: https://blogs.gentoo.org/ago/2016/10/16/jasper-two-divide-by-zero-in-jpc_dec_process_siz-jpc_dec-c/