[Secure-testing-commits] r50502 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Mon Apr 10 04:39:06 UTC 2017


Author: carnil
Date: 2017-04-10 04:39:06 +0000 (Mon, 10 Apr 2017)
New Revision: 50502

Modified:
   data/CVE/list
Log:
Add bug reference for CVE-2017-7613

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-04-10 04:38:56 UTC (rev 50501)
+++ data/CVE/list	2017-04-10 04:39:06 UTC (rev 50502)
@@ -5,7 +5,7 @@
 	NOTE: https://blogs.gentoo.org/ago/2017/04/05/binutils-two-null-pointer-dereference-in-elflink-c/
 	NOTE: Fixed by: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ad32986fdf9da1c8748e47b8b45100398223dba8
 CVE-2017-7613 (elflint.c in elfutils 0.168 does not validate the number of sections ...)
-	- elfutils <unfixed>
+	- elfutils <unfixed> (bug #859990)
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=21312
 	NOTE: https://blogs.gentoo.org/ago/2017/04/03/elfutils-memory-allocation-failure-in-xcalloc-xmalloc-c/
 CVE-2017-7612 (The check_sysv_hash function in elflint.c in elfutils 0.168 allows ...)




More information about the Secure-testing-commits mailing list