[Secure-testing-commits] r39146 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-01-24 15:39:10 +0000 (Sun, 24 Jan 2016)
New Revision: 39146

Modified:
   data/CVE/list
Log:
CVE requested for two tiff issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-01-24 15:27:49 UTC (rev 39145)
+++ data/CVE/list	2016-01-24 15:39:10 UTC (rev 39146)
@@ -6,12 +6,14 @@
 	- tiff 4.0.6-1
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2522
 	NOTE: Commit: https://github.com/vadz/libtiff/commit/aaab5c3c9d2a2c6984f23ccbc79702610439bc65
+	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/01/24/3
 CVE-2015-XXXX [potential out-of-bound write in NeXTDecode()]
 	- tiff 4.0.6-1
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2508
 	NOTE: Can be reproduced with tiff compiled with AddressSanitizer
 	NOTE: and the same reproducer file http://lcamtuf.coredump.cx/afl/vulns/libtiff5.tif
 	NOTE: Commit: https://github.com/vadz/libtiff/commit/b18012dae552f85dcc5c57d3bf4e997a15b1cc1c
+	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/01/24/4
 CVE-2015-XXXX [insecure use of temporary files]
 	- node-cli <unfixed> (bug #809252)
 	[jessie] - node-cli <no-dsa> (Minor issue)