[Secure-testing-commits] r55713 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-09-13 05:13:43 +0000 (Wed, 13 Sep 2017)
New Revision: 55713

Modified:
   data/CVE/list
Log:
Update information for perl on older versions

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-13 04:53:07 UTC (rev 55712)
+++ data/CVE/list	2017-09-13 05:13:43 UTC (rev 55713)
@@ -3717,6 +3717,7 @@
 CVE-2017-12883 [Buffer over-read in regular expression parser]
 	RESERVED
 	- perl 5.26.0-8 (bug #875597)
+	[wheezy] - perl <not-affected> (Vulnerable code introduced later)
 	NOTE: https://rt.perl.org/Public/Bug/Display.html?id=131598 (not yet public)
 	NOTE: https://perl5.git.perl.org/perl.git/commitdiff/2be4edede4ae226e2eebd4eff28cedd2041f300f
 	NOTE: maint-5.26: https://perl5.git.perl.org/perl.git/commitdiff/2692dda97731c37082a0075eff50d741901c665f
@@ -4359,6 +4360,7 @@
 CVE-2017-12837 [Heap buffer overflow in regular expression compiler]
 	RESERVED
 	- perl 5.26.0-8 (bug #875596)
+	[wheezy] - perl <not-affected> (Vulnerable code introduced after 5.14.4)
 	NOTE: https://rt.perl.org/Public/Bug/Display.html?id=131582 (not yet public)
 	NOTE: https://perl5.git.perl.org/perl.git/commitdiff/96c83ed78aeea1a0496dd2b2d935869a822dc8a5
 	NOTE: maint-5.26: https://perl5.git.perl.org/perl.git/commitdiff/66288bb3f44c8aa5122e5f40d8cfc0eada8b1695