[Secure-testing-commits] r53556 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-07-16 20:51:42 +0000 (Sun, 16 Jul 2017)
New Revision: 53556

Modified:
   data/CVE/list
Log:
libsass bug


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-16 20:50:58 UTC (rev 53555)
+++ data/CVE/list	2017-07-16 20:51:42 UTC (rev 53556)
@@ -2,11 +2,11 @@
 	- yadm <unfixed> (bug #868300)
 	NOTE: https://github.com/TheLocehiliosan/yadm/issues/74
 CVE-2017-11342 (There is an illegal address access in ast.cpp of LibSass 3.4.5. A ...)
-	- libsass <unfixed>
+	- libsass <unfixed> (bug #868577)
 	[stretch] - libsass <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470722
 CVE-2017-11341 (There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A ...)
-	- libsass <unfixed>
+	- libsass <unfixed> (bug #868577)
 	[stretch] - libsass <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1470714
 CVE-2017-11340 (There is a Segmentation fault in the XmpParser::terminate() function in ...)