[Secure-testing-commits] r19752 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2012-07-17 18:42:59 +0000 (Tue, 17 Jul 2012)
New Revision: 19752

Modified:
   data/CVE/list
Log:
CVE-2012-2806 libjpeg-turbo

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-07-17 18:37:27 UTC (rev 19751)
+++ data/CVE/list	2012-07-17 18:42:59 UTC (rev 19752)
@@ -2638,8 +2638,12 @@
 CVE-2012-2807 (Multiple integer overflows in libxml2, as used in Google Chrome before ...)
 	- libxml2 <unfixed> (bug #679280)
 	NOTE: http://git.chromium.org/gitweb/?p=chromium/src.git;a=patch;h=f183580d61c054f7f6bb35cfe29e1b342390fbebcd
-CVE-2012-2806
+CVE-2012-2806 [libjpeg-turbo: Heap-based buffer overflow when decompressing corrupt JPEG images]
 	RESERVED
+	TODO: check
+	NOTE: http://www.openwall.com/lists/oss-security/2012/07/17/3
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=826849
+	NOTE: http://libjpeg-turbo.svn.sourceforge.net/viewvc/libjpeg-turbo?view=revision&revision=830
 CVE-2012-2805
 	RESERVED
 CVE-2012-2804