[Secure-testing-commits] r49872 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-03-21 09:50:12 +0000 (Tue, 21 Mar 2017)
New Revision: 49872

Modified:
   data/CVE/list
Log:
Add upstream commits for binutils issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-03-21 09:25:09 UTC (rev 49871)
+++ data/CVE/list	2017-03-21 09:50:12 UTC (rev 49872)
@@ -6,10 +6,13 @@
 	RESERVED
 CVE-2017-7210 (objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based ...)
 	- binutils <unfixed>
-	NOTE:  https://sourceware.org/bugzilla/show_bug.cgi?id=21157
+	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=21157
+	NOTE: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=a2dea0b20bc66a4c287c3c50002b8c3b3e9d953a
 CVE-2017-7209 (The dump_section_as_bytes function in readelf in GNU Binutils 2.28 ...)
 	- binutils <unfixed>
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=21135
+	NOTE: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f055032e4e922f1e1a5e11026c7c2669fa2a7d19
+	NOTE: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=1835f746a7c7fff70a2cc03a051b14fdc6b3f73f
 CVE-2017-7208 (The decode_residual function in libavcodec in libav 9.21 allows remote ...)
 	TODO: check
 CVE-2017-7207 (The mem_get_bits_rectangle function in Artifex Software, Inc. ...)