[Secure-testing-commits] r52231 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-06-02 10:45:08 +0000 (Fri, 02 Jun 2017)
New Revision: 52231

Modified:
   data/CVE/list
Log:
pjproject issues fixed in unstable

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-02 10:16:46 UTC (rev 52230)
+++ data/CVE/list	2017-06-02 10:45:08 UTC (rev 52231)
@@ -21,9 +21,12 @@
 	[wheezy] - asterisk <not-affected> (Vulnerable code not present)
 	NOTE: http://downloads.asterisk.org/pub/security/AST-2017-004.txt
 CVE-2017-9359 (The multi-part body parser in PJSIP, as used in Asterisk Open Source ...)
-	- pjproject <unfixed> (bug #863902)
+	- pjproject 2.5.5~dfsg-6 (bug #863902)
 	NOTE: http://downloads.asterisk.org/pub/security/AST-2017-003.txt
 	NOTE: https://issues.asterisk.org/jira/browse/ASTERISK-26939
+CVE-2017-XXXX [AST-2017-002: Buffer Overrun in PJSIP transaction layer]
+	- pjproject 2.5.5~dfsg-6 (bug #863901)
+	NOTE: http://downloads.asterisk.org/pub/security/AST-2017-002.txt
 CVE-2017-9355
 	RESERVED
 CVE-2017-9354 (In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the RGMP dissector ...)