From 1efc6d893859bc3052b4d8017cc2caf411f3e63d Mon Sep 17 00:00:00 2001
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Sun, 27 Nov 2022 09:37:17 +0100
Subject: Add CVE-2022-45907/pytorch

---
 data/CVE/list | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/data/CVE/list b/data/CVE/list
index 01ea72e776..7d3bc953d8 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -57,7 +57,9 @@ CVE-2022-45909 (drachtio-server 0.8.18 has a heap-based buffer over-read via a l
 CVE-2022-45908 (In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vuln ...)
 	TODO: check
 CVE-2022-45907 (In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line c ...)
-	TODO: check
+	- pytorch <unfixed>
+	NOTE: https://github.com/pytorch/pytorch/commit/767f6aa49fe20a2766b9843d01e3b7f7793df6a3
+	NOTE: https://github.com/pytorch/pytorch/issues/88868
 CVE-2022-45906
 	RESERVED
 CVE-2022-45905
-- 
cgit v1.2.3