[Secure-testing-commits] r23048 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-07-23 15:18:45 +0000 (Tue, 23 Jul 2013)
New Revision: 23048

Modified:
   data/CVE/list
Log:
update entry for CVE-2013-4160: add lcms2 source package, add source package name lcms to TODO for old version

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-07-23 14:20:33 UTC (rev 23047)
+++ data/CVE/list	2013-07-23 15:18:45 UTC (rev 23048)
@@ -1506,7 +1506,10 @@
 CVE-2013-4160
 	RESERVED
 	- lcms <unfixed>
-	TODO: The version in Debian is very old, most affected code apparently not present, needs to be checked
+	TODO: The version for lcms in Debian is very old, most affected code apparently not present, needs to be checked
+	- lcms2 <unfixed> (bug #714529)
+	NOTE: https://github.com/mm2/Little-CMS/commit/91c2db7f2559be504211b283bc3a2c631d6f06d9
+	NOTE: https://bugzilla.novell.com/show_bug.cgi?id=826097#c9
 CVE-2013-4159
 	RESERVED
 CVE-2013-4158