[Secure-testing-commits] r50406 - data/CVE

Thu Apr 6 11:24:34 UTC 2017

Author: carnil
Date: 2017-04-06 11:24:34 +0000 (Thu, 06 Apr 2017)
New Revision: 50406

Modified:
   data/CVE/list
Log:
Add bug reference for CVE-2017-7448/lepton

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-04-06 11:13:05 UTC (rev 50405)
+++ data/CVE/list	2017-04-06 11:24:34 UTC (rev 50406)
@@ -227,7 +227,9 @@
 CVE-2017-7449
 	RESERVED
 CVE-2017-7448 (The allocate_channel_framebuffer function in uncompressed_components.hh ...)
-	- lepton <unfixed>
+	- lepton <unfixed> (bug #859714)
+	NOTE: https://github.com/dropbox/lepton/issues/86
+	NOTE: https://github.com/dropbox/lepton/commit/7789d99ac156adfd7bbf66e7824bd3e948a74cf7
 CVE-2017-7447 (HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote ...)
 	NOT-FOR-US: HelpDEZk
 CVE-2017-7446 (HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of ...)


