[Secure-testing-commits] r39147 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Sun Jan 24 18:13:24 UTC 2016
Author: carnil
Date: 2016-01-24 18:13:24 +0000 (Sun, 24 Jan 2016)
New Revision: 39147
Modified:
data/CVE/list
Log:
CVE-2015-8784/tiff assigned
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-01-24 15:39:10 UTC (rev 39146)
+++ data/CVE/list 2016-01-24 18:13:24 UTC (rev 39147)
@@ -7,13 +7,13 @@
NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2522
NOTE: Commit: https://github.com/vadz/libtiff/commit/aaab5c3c9d2a2c6984f23ccbc79702610439bc65
NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/01/24/3
-CVE-2015-XXXX [potential out-of-bound write in NeXTDecode()]
+CVE-2015-8784 [potential out-of-bound write in NeXTDecode()]
- tiff 4.0.6-1
NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2508
NOTE: Can be reproduced with tiff compiled with AddressSanitizer
NOTE: and the same reproducer file http://lcamtuf.coredump.cx/afl/vulns/libtiff5.tif
NOTE: Commit: https://github.com/vadz/libtiff/commit/b18012dae552f85dcc5c57d3bf4e997a15b1cc1c
- NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/01/24/4
+ NOTE: http://www.openwall.com/lists/oss-security/2016/01/24/4
CVE-2015-XXXX [insecure use of temporary files]
- node-cli <unfixed> (bug #809252)
[jessie] - node-cli <no-dsa> (Minor issue)
More information about the Secure-testing-commits
mailing list