[Secure-testing-commits] r39145 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-01-24 15:27:49 +0000 (Sun, 24 Jan 2016)
New Revision: 39145

Modified:
   data/CVE/list
Log:
Add commit references for two tiff issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-01-24 15:25:42 UTC (rev 39144)
+++ data/CVE/list	2016-01-24 15:27:49 UTC (rev 39145)
@@ -5,11 +5,13 @@
 CVE-2015-XXXX [Out-of-bounds write for invalid images using LogL compression]
 	- tiff 4.0.6-1
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2522
+	NOTE: Commit: https://github.com/vadz/libtiff/commit/aaab5c3c9d2a2c6984f23ccbc79702610439bc65
 CVE-2015-XXXX [potential out-of-bound write in NeXTDecode()]
 	- tiff 4.0.6-1
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2508
 	NOTE: Can be reproduced with tiff compiled with AddressSanitizer
 	NOTE: and the same reproducer file http://lcamtuf.coredump.cx/afl/vulns/libtiff5.tif
+	NOTE: Commit: https://github.com/vadz/libtiff/commit/b18012dae552f85dcc5c57d3bf4e997a15b1cc1c
 CVE-2015-XXXX [insecure use of temporary files]
 	- node-cli <unfixed> (bug #809252)
 	[jessie] - node-cli <no-dsa> (Minor issue)