[Secure-testing-commits] r52462 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-06-10 04:33:27 +0000 (Sat, 10 Jun 2017)
New Revision: 52462

Modified:
   data/CVE/list
Log:
Reference tor fixes for CVE-2017-037{5,6}

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-10 04:24:02 UTC (rev 52461)
+++ data/CVE/list	2017-06-10 04:33:27 UTC (rev 52462)
@@ -25165,10 +25165,12 @@
 CVE-2017-0376 (The hidden-service feature in Tor before 0.3.0.8 allows a denial of ...)
 	- tor 0.2.9.11-1 (bug #864424)
 	NOTE: https://trac.torproject.org/22494
+	NOTE: Fixed by: https://github.com/torproject/tor/commit/56a7c5bc15e0447203a491c1ee37de9939ad1dcd
 	NOTE: Introduced in 0.2.2.1-alpha; fixed in 0.2.4.29, 0.2.5.14, 0.2.6.12, 0.2.7.8, 0.2.8.14, 0.2.9.11 0.3.0.8, 0.3.1.3-alpha
 CVE-2017-0375 (The hidden-service feature in Tor before 0.3.0.8 allows a denial of ...)
 	- tor <not-affected> (Introduced in 0.3.0.1-alpha)
 	NOTE: https://trac.torproject.org/22493
+	NOTE: Fixed by: https://github.com/torproject/tor/commit/79b59a2dfcb68897ee89d98587d09e55f07e68d7
 	NOTE: Introduced in 0.3.0.1-alpha; fixed in 0.3.0.8, 0.3.1.3-alpha
 CVE-2017-0374 (lib/Config/Model.pm in Config-Model (aka libconfig-model-perl) before ...)
 	- libconfig-model-perl 2.097-2