[Secure-testing-commits] r57700 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-11-17 09:20:46 +0000 (Fri, 17 Nov 2017)
New Revision: 57700

Modified:
   data/CVE/list
Log:
new ldns issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-11-17 09:19:38 UTC (rev 57699)
+++ data/CVE/list	2017-11-17 09:20:46 UTC (rev 57700)
@@ -34,9 +34,11 @@
 CVE-2017-1000234 (I, Librarian version <=4.6 & 4.7 is vulnerable to Directory ...)
 	NOT-FOR-US: I, Librarian
 CVE-2017-1000232 (A double-free vulnerability in str2host.c in ldns 1.7.0 have ...)
-	TODO: check
+	- ldns <unfixed>
+	NOTE: https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=1257
 CVE-2017-1000231 (A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified ...)
-	TODO: check
+	- ldns <unfixed>
+	NOTE: https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=1256
 CVE-2017-1000229 (Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 ...)
 	TODO: check
 CVE-2017-1000228 (nodejs ejs versions older than 2.5.3 is vulnerable to remote code ...)