[Secure-testing-commits] r54100 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-07-30 19:50:17 +0000 (Sun, 30 Jul 2017)
New Revision: 54100

Modified:
   data/CVE/list
Log:
Add bug reference for CVE-2017-1155{4,5,6}/libsass

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-30 19:47:44 UTC (rev 54099)
+++ data/CVE/list	2017-07-30 19:50:17 UTC (rev 54100)
@@ -545,15 +545,15 @@
 CVE-2017-11557
 	RESERVED
 CVE-2017-11556 (There is a stack consumption vulnerability in the ...)
-	- libsass <unfixed>
+	- libsass <unfixed> (bug #870182)
 	[stretch] - libsass <no-dsa> (Minor issue)
 	NOTE: https://github.com/sass/libsass/issues/2447
 CVE-2017-11555 (There is an illegal address access in the Eval::operator function in ...)
-	- libsass <unfixed>
+	- libsass <unfixed> (bug #870182)
 	[stretch] - libsass <no-dsa> (Minor issue)
 	NOTE: https://github.com/sass/libsass/issues/2446
 CVE-2017-11554 (There is a stack consumption vulnerability in the lex function in ...)
-	- libsass <unfixed>
+	- libsass <unfixed> (bug #870182)
 	[stretch] - libsass <no-dsa> (Minor issue)
 	NOTE: https://github.com/sass/libsass/issues/2445
 CVE-2017-11553 (There is an illegal address access in the extend_alias_table function ...)