[Secure-testing-commits] r46927 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-12-09 06:55:26 +0000 (Fri, 09 Dec 2016)
New Revision: 46927

Modified:
   data/CVE/list
Log:
Expand note for CVE-2015-8870

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-12-09 06:43:32 UTC (rev 46926)
+++ data/CVE/list	2016-12-09 06:55:26 UTC (rev 46927)
@@ -25525,7 +25525,7 @@
 CVE-2015-8870 (Integer overflow in tools/bmp2tiff.c in LibTIFF before 4.0.4 allows ...)
 	- tiff <undetermined>
 	NOTE: Fixed in 4.0.5-1 in unstable upload,  but might be as well already earlier together the CVE-2014-9330.patch
-	NOTE: already applied earlier.
+	NOTE: already applied earlier. Should be fixed in 4.0.3-12 with the same patch as for CVE-2014-9330.
 CVE-2013-7455 (Double free vulnerability in the DefaultICCintents function in ...)
 	- lcms2 2.6-1
 	[wheezy] - lcms2 <not-affected> (vulnerable code not present, no cmsPipelineFree(Lut); in Error:-part)