[Secure-testing-commits] r42341 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2016-06-06 04:47:11 +0000 (Mon, 06 Jun 2016)
New Revision: 42341

Modified:
   data/CVE/list
Log:
CVE-2016-3633, CVE-2016-3634/tiff updates

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-06-06 04:45:48 UTC (rev 42340)
+++ data/CVE/list	2016-06-06 04:47:11 UTC (rev 42341)
@@ -4767,6 +4767,7 @@
 	- tiff3 <removed> (unimportant)
 	NOTE: src:tiff3: built binary packages do not contain the TIFF tools
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2547
+	NOTE: Upstream will remove thumbnail from 4.0.7 release
 CVE-2016-3633 [Illegal read occurs in the _ setrow function in thumbnail]
 	RESERVED
 	- tiff <unfixed>
@@ -4775,6 +4776,7 @@
 	- tiff3 <removed> (unimportant)
 	NOTE: src:tiff3: built binary packages do not contain the TIFF tools
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2548
+	NOTE: Upstream will remove thumbnail from 4.0.7 release
 CVE-2016-3632 [Illegal write occurs in the _TIFFVGetField function in tif_dirinfo.c when using thumbnail]
 	RESERVED
 	- tiff <unfixed>