[Secure-testing-commits] r49184 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-02-24 12:49:25 +0000 (Fri, 24 Feb 2017)
New Revision: 49184

Modified:
   data/CVE/list
Log:
Add note for CVE-2017-5956

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-02-24 12:25:38 UTC (rev 49183)
+++ data/CVE/list	2017-02-24 12:49:25 UTC (rev 49184)
@@ -865,6 +865,7 @@
 	- virglrenderer <unfixed>
 	NOTE: https://cgit.freedesktop.org/virglrenderer/commit/?id=a5ac49940c40ae415eac0cf912eac7070b4ba95d (0.6.0)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1421073
+	NOTE: The original fix opens a memory leak: http://www.openwall.com/lists/oss-security/2017/02/24/2
 CVE-2017-5955
 	RESERVED
 CVE-2017-5954 (An issue was discovered in the serialize-to-js package 0.5.0 for ...)