[Secure-testing-commits] r50930 - data/CVE

Sat Apr 22 18:17:14 UTC 2017

Author: carnil
Date: 2017-04-22 18:17:14 +0000 (Sat, 22 Apr 2017)
New Revision: 50930

Modified:
   data/CVE/list
Log:
Reported bug for CVE-2017-7946/radare2

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-04-22 17:56:33 UTC (rev 50929)
+++ data/CVE/list	2017-04-22 18:17:14 UTC (rev 50930)
@@ -245,7 +245,7 @@
 CVE-2013-7463 (The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use ...)
 	NOT-FOR-US: aescrypt gem for Ruby
 CVE-2017-7946 (The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 ...)
-	- radare2 <unfixed> (low)
+	- radare2 <unfixed> (low; bug #860962)
 	[jessie] - radare2 <no-dsa> (Minor issue)
 	[wheezy] - radare2 <no-dsa> (Minor issue)
 	NOTE: https://github.com/radare/radare2/issues/7301


