[Secure-testing-commits] r47828 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-01-08 08:48:31 +0000 (Sun, 08 Jan 2017)
New Revision: 47828

Modified:
   data/CVE/list
Log:
icoutils: Add reference to CVE request

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-08 06:47:56 UTC (rev 47827)
+++ data/CVE/list	2017-01-08 08:48:31 UTC (rev 47828)
@@ -500,7 +500,8 @@
 	NOTE: https://borgbackup.readthedocs.io/en/stable/changes.html#pre-1-0-9-manifest-spoofing-vulnerability
 CVE-2017-XXXX [wrestool: exploitable crash]
 	- icoutils 0.31.0-4 (bug #850017)
-	NOTE: https://anonscm.debian.org/git/users/cjwatson/icoutils.git/tree/debian/patches/check-offset-overflow.patch
+	NOTE: https://anonscm.debian.org/git/users/cjwatson/icoutils.git/plain/debian/patches/check-offset-overflow.patch
+	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2017/01/08/1
 CVE-2016-XXXX [Use of uninitialized memory in unserialize()]
 	- php7.0 <unfixed> (bug #850158)
 	- php5 <unfixed>