[Secure-testing-commits] r43157 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2016-07-12 20:41:15 +0000 (Tue, 12 Jul 2016)
New Revision: 43157

Modified:
   data/CVE/list
Log:
CVE-2015-8668/tiff

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-07-12 20:35:04 UTC (rev 43156)
+++ data/CVE/list	2016-07-12 20:41:15 UTC (rev 43157)
@@ -16111,10 +16111,8 @@
 CVE-2015-8668 (Heap-based buffer overflow in the PackBitsPreEncode function in ...)
 	- tiff <unfixed>
 	- tiff3 <removed>
-	NOTE: http://seclists.org/bugtraq/2015/Dec/138
-	NOTE: no fix published yet
-	NOTE: Red Hat say it's only OOB read: https://bugzilla.redhat.com/show_bug.cgi?id=1294425#c1
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2563
+	NOTE: Red Hat say it's only OOB read: https://bugzilla.redhat.com/show_bug.cgi?id=1294425#c1
 CVE-2015-8683 (The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 ...)
 	{DSA-3467-1 DLA-402-1}
 	- tiff 4.0.6-1 (bug #809021)