[Secure-testing-commits] r52334 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-06-05 18:12:42 +0000 (Mon, 05 Jun 2017)
New Revision: 52334

Modified:
   data/CVE/list
Log:
Reference fixing commits for CVE-2017-904{7,8}/libxml2

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-05 17:33:27 UTC (rev 52333)
+++ data/CVE/list	2017-06-05 18:12:42 UTC (rev 52334)
@@ -1262,10 +1262,12 @@
 	- libxml2 <unfixed> (bug #863021)
 	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=781701 (not public)
 	NOTE: http://www.openwall.com/lists/oss-security/2017/05/15/1
+	NOTE: Fixed by: https://git.gnome.org/browse/libxml2/commit/?id=932cc9896ab41475d4aa429c27d9afd175959d74
 CVE-2017-9047 (A buffer overflow was discovered in libxml2 ...)
 	- libxml2 <unfixed> (bug #863022)
 	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=781333 (not public)
 	NOTE: http://www.openwall.com/lists/oss-security/2017/05/15/1
+	NOTE: Fixed by: https://git.gnome.org/browse/libxml2/commit/?id=932cc9896ab41475d4aa429c27d9afd175959d74
 CVE-2017-9046 (winpm-32.exe in Pegasus Mail (aka Pmail) v4.72 build 572 allows code ...)
 	NOT-FOR-US: Pegasus Mail
 CVE-2017-9045 (The Google I/O 2017 application before 5.1.4 for Android downloads ...)