[Secure-testing-commits] r57062 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-10-28 09:57:13 +0000 (Sat, 28 Oct 2017)
New Revision: 57062

Modified:
   data/CVE/list
Log:
add references


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-28 09:45:21 UTC (rev 57061)
+++ data/CVE/list	2017-10-28 09:57:13 UTC (rev 57062)
@@ -27,12 +27,14 @@
 	- binutils <not-affected> (Incomplete fix not applied)
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=22205
 	NOTE: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=a54018b72d75abf2e74bf36016702da06399c1d9
+	NOTE: https://blogs.gentoo.org/ago/2017/10/24/binutils-null-pointer-dereference-in-concat_filename-dwarf2-c-incomplete-fix-for-cve-2017-15023/
 CVE-2017-15938 (dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as ...)
 	- binutils <unfixed>
 	[stretch] - binutils <ignored> (Minor issue)
 	[jessie] - binutils <ignored> (Minor issue)
 	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=22209
 	NOTE: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=1b86808a86077722ee4f42ff97f836b12420bb2a
+ 	NOTE: https://blogs.gentoo.org/ago/2017/10/24/binutils-invalid-memory-read-in-find_abstract_instance_name-dwarf2-c/
 CVE-2017-15937 (Artica Pandora FMS version 7.0 leaks a full installation pathname via ...)
 	TODO: check
 CVE-2017-15936 (In Artica Pandora FMS version 7.0, an Attacker with write Permission ...)