[Secure-testing-commits] r57044 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-10-28 07:27:27 +0000 (Sat, 28 Oct 2017)
New Revision: 57044

Modified:
   data/CVE/list
Log:
Add references for CVE-2017-1261{3,8}

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-28 07:14:10 UTC (rev 57043)
+++ data/CVE/list	2017-10-28 07:27:27 UTC (rev 57044)
@@ -9318,6 +9318,7 @@
 	RESERVED
 CVE-2017-12618 (Apache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to ...)
 	- apr-util <unfixed> (low; bug #879708)
+	NOTE: mail-archives.apache.org/mod_mbox/apr-dev/201710.mbox/%3CCACsi252POs4toeJJciwg09_eu2cO3XFg%3DUqsPjXsfjDoeC3-UQ%40mail.gmail.com%3E
 CVE-2017-12617 (When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to ...)
 	- tomcat9 <itp> (bug #802312)
 	- tomcat8 <unfixed>
@@ -9344,6 +9345,7 @@
 	RESERVED
 CVE-2017-12613 (When apr_exp_time*() or apr_os_exp_time*() functions are invoked with ...)
 	- apr <unfixed> (low; bug #879708)
+	NOTE: mail-archives.apache.org/mod_mbox/apr-dev/201710.mbox/%3CCACsi252POs4toeJJciwg09_eu2cO3XFg%3DUqsPjXsfjDoeC3-UQ%40mail.gmail.com%3E
 CVE-2017-12612 (In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe ...)
 	NOT-FOR-US: Apache Spark
 CVE-2017-12611 (In Apache Struts 2.0.1 through 2.3.33 and 2.5 through 2.5.10, using an ...)