[Secure-testing-commits] r56479 - data/CVE

[Chris Lamb]

Author: lamby
Date: 2017-10-07 07:54:07 +0000 (Sat, 07 Oct 2017)
New Revision: 56479

Modified:
   data/CVE/list
Log:
data/CVE/list: Add wheezy notes for the xserver-xorg issues.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-07 07:53:57 UTC (rev 56478)
+++ data/CVE/list	2017-10-07 07:54:07 UTC (rev 56479)
@@ -3792,6 +3792,7 @@
 	RESERVED
 	- xorg-server <unfixed>
 	NOTE: https://cgit.freedesktop.org/xorg/xserver/commit/?id=94f11ca5cf011ef123bd222cabeaef6f424d76ac
+	NOTE: This is in libxfont in wheezy
 CVE-2017-13722 [pcfGetProperties: Check string boundaries]
 	RESERVED
 	- libxfont 1:2.0.1-4
@@ -3800,6 +3801,7 @@
 	RESERVED
 	- xorg-server <unfixed>
 	NOTE: https://cgit.freedesktop.org/xorg/xserver/commit/?id=b95f25af141d33a65f6f821ea9c003f66a01e1f1
+	NOTE: In wheezy this is possibly libxext, src/XShm.c?
 CVE-2017-13720 [Check for end of string in PatternMatch]
 	RESERVED
 	- libxfont 1:2.0.1-4