[Secure-testing-commits] r48703 - data/CVE

[Emilio Pozuelo Monfort]

Author: pochu
Date: 2017-02-04 10:18:37 +0000 (Sat, 04 Feb 2017)
New Revision: 48703

Modified:
   data/CVE/list
Log:
libplist

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-02-04 10:16:20 UTC (rev 48702)
+++ data/CVE/list	2017-02-04 10:18:37 UTC (rev 48703)
@@ -43,15 +43,21 @@
 	RESERVED
 CVE-2017-5851
 	RESERVED
-CVE-2017-5836
+CVE-2017-5836 [issue in plist_free_data plist.c:185]
 	RESERVED
 	- libplist <unfixed> (bug #854000)
-CVE-2017-5835
+	NOTE: https://github.com/libimobiledevice/libplist/issues/86
+	NOTE: http://www.openwall.com/lists/oss-security/2017/01/31/6
+CVE-2017-5835 [memory allocation error in plist_from_bin]
 	RESERVED
 	- libplist <unfixed> (bug #854000)
-CVE-2017-5834
+	NOTE: https://github.com/libimobiledevice/libplist/issues/88
+	NOTE: http://www.openwall.com/lists/oss-security/2017/01/31/6
+CVE-2017-5834 [heap-buffer-overflow in parse_dict_node]
 	RESERVED
 	- libplist <unfixed> (bug #854000)
+	NOTE: https://github.com/libimobiledevice/libplist/issues/89
+	NOTE: http://www.openwall.com/lists/oss-security/2017/01/31/6
 CVE-2017-5829
 	RESERVED
 CVE-2017-5828