[Secure-testing-commits] r55733 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-09-13 17:11:05 +0000 (Wed, 13 Sep 2017)
New Revision: 55733

Modified:
   data/CVE/list
Log:
Add bug reference for freexl issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-13 13:23:21 UTC (rev 55732)
+++ data/CVE/list	2017-09-13 17:11:05 UTC (rev 55733)
@@ -34042,12 +34042,14 @@
 	NOTE: http://www.openwall.com/lists/oss-security/2016/12/03/5
 CVE-2017-2924 [Heap-based buffer overflow in the read_legacy_biff function]
 	RESERVED
-	- freexl <unfixed>
+	- freexl <unfixed> (bug #875691)
 	NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0431
+	NOTE: https://www.gaia-gis.it/fossil/freexl/ci/40c17539ea56f0d8
 CVE-2017-2923 [Heap-based buffer overflow in the read_biff_next_record function]
 	RESERVED
-	- freexl <unfixed>
+	- freexl <unfixed> (bug #875690)
 	NOTE: https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0430
+	NOTE: https://www.gaia-gis.it/fossil/freexl/ci/40c17539ea56f0d8
 CVE-2017-2922
 	RESERVED
 CVE-2017-2921