[Secure-testing-commits] r51256 - data/CVE

Tue May 2 04:50:18 UTC 2017

Author: carnil
Date: 2017-05-02 04:50:18 +0000 (Tue, 02 May 2017)
New Revision: 51256

Modified:
   data/CVE/list
Log:
Add upstream information for CVE-2017-8398

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-05-02 04:48:57 UTC (rev 51255)
+++ data/CVE/list	2017-05-02 04:50:18 UTC (rev 51256)
@@ -14,6 +14,8 @@
 CVE-2017-8398 (dwarf.c in GNU Binutils 2.28 is vulnerable to an invalid read of size 1 ...)
 	- binutils <unfixed>
 	[jessie] - binutils <no-dsa> (Minor issue)
+	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=21438
+	NOTE: Fixed by: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=d949ff5607b9f595e0eed2ff15fbe5eb84eb3a34
 CVE-2017-8397 (The Binary File Descriptor (BFD) library (aka libbfd), as distributed ...)
 	TODO: check
 CVE-2017-8396 (The Binary File Descriptor (BFD) library (aka libbfd), as distributed ...)


