[Secure-testing-commits] r50499 - data/CVE

Mon Apr 10 04:19:08 UTC 2017

Author: carnil
Date: 2017-04-10 04:19:08 +0000 (Mon, 10 Apr 2017)
New Revision: 50499

Modified:
   data/CVE/list
Log:
CVE-2017-7614/binutils updated

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-04-09 21:23:15 UTC (rev 50498)
+++ data/CVE/list	2017-04-10 04:19:08 UTC (rev 50499)
@@ -1,7 +1,9 @@
 CVE-2017-7615
 	RESERVED
 CVE-2017-7614 (elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as ...)
-	TODO: check
+	- binutils <unfixed>
+	NOTE: https://blogs.gentoo.org/ago/2017/04/05/binutils-two-null-pointer-dereference-in-elflink-c/
+	NOTE: Fixed by: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ad32986fdf9da1c8748e47b8b45100398223dba8
 CVE-2017-7613 (elflint.c in elfutils 0.168 does not validate the number of sections ...)
 	TODO: check
 CVE-2017-7612 (The check_sysv_hash function in elflint.c in elfutils 0.168 allows ...)


