[Secure-testing-commits] r55381 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-09-02 06:27:06 +0000 (Sat, 02 Sep 2017)
New Revision: 55381

Modified:
   data/CVE/list
Log:
Add reference and comment for CVE-2017-13716

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-01 21:59:24 UTC (rev 55380)
+++ data/CVE/list	2017-09-02 06:27:06 UTC (rev 55381)
@@ -991,6 +991,9 @@
 	- binutils <unfixed> (low)
 	[stretch] - binutils <ignored> (Minor issue)
 	[jessie] - binutils <ignored> (Minor issue)
+	NOTE: https://sourceware.org/bugzilla/show_bug.cgi?id=22009
+	NOTE: Underlying bug is though in the C++ demangler part of libiberty, MITRE
+	NOTE: might want to reassign the product for this CVE.
 CVE-2016-10503 (IBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated ...)
 	NOT-FOR-US: IBM
 CVE-2017-13715 (The __skb_flow_dissect function in net/core/flow_dissector.c in the ...)