[Secure-testing-commits] r20567 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2012-11-28 07:38:53 +0000 (Wed, 28 Nov 2012)
New Revision: 20567

Modified:
   data/CVE/list
Log:
libtiff issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2012-11-28 07:29:31 UTC (rev 20566)
+++ data/CVE/list	2012-11-28 07:38:53 UTC (rev 20567)
@@ -1079,8 +1079,11 @@
 	RESERVED
 CVE-2012-5582
 	RESERVED
-CVE-2012-5581
+CVE-2012-5581 [libtiff: Stack based buffer overflow when handling DOTRANGE tags]
 	RESERVED
+	TODO: check if Debian is affected
+	NOTE: http://www.openwall.com/lists/oss-security/2012/11/28/1
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=867235
 CVE-2012-5580 [libproxy: format string issue]
 	RESERVED
 	- libproxy 0.3.1-5.1