[Secure-testing-commits] r40658 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-03-30 11:15:57 +0000 (Wed, 30 Mar 2016)
New Revision: 40658

Modified:
   data/CVE/list
Log:
Add CVE-2016-3186/tiff

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-03-30 09:10:18 UTC (rev 40657)
+++ data/CVE/list	2016-03-30 11:15:57 UTC (rev 40658)
@@ -1011,8 +1011,13 @@
 	RESERVED
 CVE-2016-3187
 	RESERVED
-CVE-2016-3186
+CVE-2016-3186 [buffer overflow in gif2tiff]
 	RESERVED
+	- tiff <unfixed>
+	- tiff3 <removed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1319666
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1319503
+	TODO: check versions, furthermore since only in gif2tiff no-dsa for the affected suites
 CVE-2016-3185 [Type Confusion Vulnerability - SOAP / make_http_soap_request()]
 	RESERVED
 	- php7.0 7.0.4-1