[Secure-testing-commits] r40748 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-04-04 08:36:05 +0000 (Mon, 04 Apr 2016)
New Revision: 40748

Modified:
   data/CVE/list
Log:
Update CVE-2016-3616/libjpeg8 information

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-04-04 08:25:26 UTC (rev 40747)
+++ data/CVE/list	2016-04-04 08:36:05 UTC (rev 40748)
@@ -713,7 +713,8 @@
 	- libjpeg-turbo 1:1.4.2-1
 	NOTE: libjpeg-turbo: Fixed by: https://github.com/libjpeg-turbo/libjpeg-turbo/commit/6709e4a0cfa44d4f54ee8ad05753d4aa9260cb91 (1.4.2)
 	- libjpeg6b <undetermined>
-	- libjpeg8 <undetermined>
+	- libjpeg8 <unfixed>
+	NOTE: cjpeg in src:libjpeg8 vulnerable, but not installed in binary package since 8d1-2
 	- libjpeg9 <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1319661
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1318509