Author: carnil
Date: 2017-10-16 11:22:10 +0000 (Mon, 16 Oct 2017)
New Revision: 56747
Modified:
data/CVE/list
Log:
CVE-2017-14039 fixed in unstable
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-10-16 11:17:18 UTC (rev 56746)
+++ data/CVE/list 2017-10-16 11:22:10 UTC (rev 56747)
@@ -4662,7 +4662,7 @@
NOTE: Reproducer:
https://blogs.gentoo.org/ago/2017/08/28/openjpeg-invalid-memory-write-in-tgatoimage-convert-c/
NOTE: https://github.com/uclouvain/openjpeg/issues/995
CVE-2017-14039 (A heap-based buffer overflow was discovered in the
opj_t2_encode_packet ...)
- - openjpeg2 <unfixed> (bug #874118)
+ - openjpeg2 2.3.0-1 (bug #874118)
NOTE: Fixed by:
https://github.com/uclouvain/openjpeg/commit/c535531f03369623b9b833ef41952c62257b507e
NOTE: Reproducer:
https://blogs.gentoo.org/ago/2017/08/28/openjpeg-heap-based-buffer-overflow-in-opj_t2_encode_packet-t2-c/
NOTE: https://github.com/uclouvain/openjpeg/issues/992
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
