[Secure-testing-commits] r38570 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-12-28 07:08:50 +0000 (Mon, 28 Dec 2015)
New Revision: 38570

Modified:
   data/CVE/list
Log:
Add CVE-2015-8668/tiff

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-12-28 07:06:04 UTC (rev 38569)
+++ data/CVE/list	2015-12-28 07:08:50 UTC (rev 38570)
@@ -3,6 +3,11 @@
 	[squeeze] - phpmyadmin <not-affected> (Vulnerable code not present)
 	NOTE: https://www.phpmyadmin.net/security/PMASA-2015-6/
 	NOTE: non-issue for Debian-packaged version
+CVE-2015-8668 [libtiff bmp file Heap Overflow]
+	- tiff <unfixed>
+	- tiff3 <removed>
+	NOTE: http://seclists.org/bugtraq/2015/Dec/138
+	TODO: check
 CVE-2015-8683 [out-of-bounds read in CIE Lab image format]
 	- tiff <unfixed> (bug #809021)
 	- tiff3 <removed>