[Secure-testing-commits] r55697 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-09-12 18:36:37 +0000 (Tue, 12 Sep 2017)
New Revision: 55697

Modified:
   data/CVE/list
Log:
Add CVE-2017-100025{0,1} for bluez and linux

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-12 18:09:36 UTC (rev 55696)
+++ data/CVE/list	2017-09-12 18:36:37 UTC (rev 55697)
@@ -517,6 +517,13 @@
 	NOTE: https://blogs.gentoo.org/ago/2017/08/16/openjpeg-heap-based-buffer-overflow-in-opj_mqc_flush-mqc-c/
 	NOTE: https://github.com/uclouvain/openjpeg/commit/afb308b9ccbe129608c9205cf3bb39bbefad90b9
 	NOTE: https://github.com/uclouvain/openjpeg/issues/982
+CVE-2017-1000251 [stack overflow]
+	- linux <unfixed>
+	NOTE: https://www.armis.com/blueborne/
+	NOTE: https://access.redhat.com/security/vulnerabilities/blueborne
+CVE-2017-1000250 [information leak vulnerability]
+	- bluez <unfixed>
+	NOTE: https://www.armis.com/blueborne/
 CVE-2017-1000249 (An issue in file() was introduced in commit ...)
 	{DSA-3965-1}
 	- file 1:5.32-1