Author: carnil
Date: 2016-12-17 13:25:04 +0000 (Sat, 17 Dec 2016)
New Revision: 47169
Modified:
data/CVE/list
Log:
Add CVE-2016-903{6,7}/tarantool
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-12-17 13:19:29 UTC (rev 47168)
+++ data/CVE/list 2016-12-17 13:25:04 UTC (rev 47169)
@@ -10050,10 +10050,14 @@
RESERVED
CVE-2016-9038
RESERVED
-CVE-2016-9037
+CVE-2016-9037 [Out of bounds access in xrow_header_decode()]
RESERVED
-CVE-2016-9036
+ - tarantool 1.7.2.385.g952d79e-1
+ NOTE: https://github.com/tarantool/tarantool/issues/1992
+CVE-2016-9036 [Invalid handling of map16 format in mp_check()]
RESERVED
+ - tarantool 1.7.2.385.g952d79e-1
+ NOTE: https://github.com/tarantool/tarantool/issues/1991
CVE-2016-9035 (An exploitable buffer overflow exists in the Joyent SmartOS ...)
TODO: check
CVE-2016-9034 (An exploitable buffer overflow exists in the Joyent SmartOS ...)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
