[Secure-testing-commits] r45591 - data/CVE

[Antoine Beaupré]

Author: anarcat
Date: 2016-10-25 15:46:01 +0000 (Tue, 25 Oct 2016)
New Revision: 45591

Modified:
   data/CVE/list
Log:
Summary: add upstream issues and patches for 8859


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-10-25 15:12:29 UTC (rev 45590)
+++ data/CVE/list	2016-10-25 15:46:01 UTC (rev 45591)
@@ -480,6 +480,8 @@
 	- musl <unfixed>
 	NOTE: http://www.openwall.com/lists/oss-security/2016/10/19/1
 	NOTE: Also check lib/tre-match-parallel.c
+	NOTE: upstream issue: https://github.com/laurikari/tre/issues/45
+	NOTE: musl patch: http://git.musl-libc.org/cgit/musl/commit/?id=c3edc06d1e1360f3570db9155d6b318ae0d0f0f7, not released yet
 CVE-2016-8858 [Memory exhaustion due to unregistered KEXINIT handler after receiving message]
 	RESERVED
 	- openssh 1:7.3p1-2 (bug #841884)