[Secure-testing-commits] r39147 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sun Jan 24 18:13:24 UTC 2016


Author: carnil
Date: 2016-01-24 18:13:24 +0000 (Sun, 24 Jan 2016)
New Revision: 39147

Modified:
   data/CVE/list
Log:
CVE-2015-8784/tiff assigned

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-01-24 15:39:10 UTC (rev 39146)
+++ data/CVE/list	2016-01-24 18:13:24 UTC (rev 39147)
@@ -7,13 +7,13 @@
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2522
 	NOTE: Commit: https://github.com/vadz/libtiff/commit/aaab5c3c9d2a2c6984f23ccbc79702610439bc65
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/01/24/3
-CVE-2015-XXXX [potential out-of-bound write in NeXTDecode()]
+CVE-2015-8784 [potential out-of-bound write in NeXTDecode()]
 	- tiff 4.0.6-1
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2508
 	NOTE: Can be reproduced with tiff compiled with AddressSanitizer
 	NOTE: and the same reproducer file http://lcamtuf.coredump.cx/afl/vulns/libtiff5.tif
 	NOTE: Commit: https://github.com/vadz/libtiff/commit/b18012dae552f85dcc5c57d3bf4e997a15b1cc1c
-	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/01/24/4
+	NOTE: http://www.openwall.com/lists/oss-security/2016/01/24/4
 CVE-2015-XXXX [insecure use of temporary files]
 	- node-cli <unfixed> (bug #809252)
 	[jessie] - node-cli <no-dsa> (Minor issue)




More information about the Secure-testing-commits mailing list