Author: gcs Date: 2017-06-01 22:18:58 +0000 (Thu, 01 Jun 2017) New Revision: 52213
Modified: data/CVE/list Log: Add fixed versions for CVE-2016-10095, CVE-2017-9147/tiff, #850316, #863185 Modified: data/CVE/list =================================================================== --- data/CVE/list 2017-06-01 21:37:24 UTC (rev 52212) +++ data/CVE/list 2017-06-01 22:18:58 UTC (rev 52213) @@ -667,7 +667,7 @@ NOTE: http://freeradius.org/security.html#session-resumption-2017 NOTE: https://anonscm.debian.org/cgit/pkg-freeradius/freeradius.git/commit/?id=8d681449aa95ee4388b5e3c266bdb070a264f563 CVE-2017-9147 (LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in ...) - - tiff <unfixed> (bug #863185) + - tiff 4.0.8-2 (bug #863185) [stretch] - tiff <no-dsa> (Minor issue) [jessie] - tiff <no-dsa> (Minor issue) [wheezy] - tiff <not-affected> (Not reproducible, fixed by former update) @@ -13333,7 +13333,7 @@ CVE-2017-4955 RESERVED CVE-2016-10095 (Stack-based buffer overflow in the _TIFFVGetField function in ...) - - tiff <unfixed> (bug #850316) + - tiff 4.0.8-2 (bug #850316) NOTE: This is a duplicate of CVE-2015-7554, both were reported against tiffsplit NOTE: While the _TIFFVGetField function is a generic function, CVE IDs seem to be NOTE: assigned per tool using it, so CVE-2015-7554/CVE-2016-10095 refers to the _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits