[Secure-testing-commits] r50520 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-04-10 06:51:52 +0000 (Mon, 10 Apr 2017)
New Revision: 50520

Modified:
   data/CVE/list
Log:
Update more tiff issues, reference reporter blog

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-04-10 06:49:10 UTC (rev 50519)
+++ data/CVE/list	2017-04-10 06:51:52 UTC (rev 50520)
@@ -41,31 +41,31 @@
 CVE-2017-7602 (LibTIFF 4.0.7 has a signed integer overflow, which might allow remote ...)
 	- tiff <unfixed>
 	- tiff3 <removed>
-	TODO: check
+	NOTE: https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes
 CVE-2017-7601 (LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" ...)
 	- tiff <unfixed>
 	- tiff3 <removed>
-	TODO: check
+	NOTE: https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes
 CVE-2017-7600 (LibTIFF 4.0.7 has an "outside the range of representable values of type ...)
 	- tiff <unfixed>
 	- tiff3 <removed>
-	TODO: check
+	NOTE: https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes
 CVE-2017-7599 (LibTIFF 4.0.7 has an "outside the range of representable values of type ...)
 	- tiff <unfixed>
 	- tiff3 <removed>
-	TODO: check
+	NOTE: https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes
 CVE-2017-7598 (tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a ...)
 	- tiff <unfixed>
 	- tiff3 <removed>
-	TODO: check
+	NOTE: https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes
 CVE-2017-7597 (tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of ...)
 	- tiff <unfixed>
 	- tiff3 <removed>
-	TODO: check
+	NOTE: https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes
 CVE-2017-7596 (LibTIFF 4.0.7 has an "outside the range of representable values of type ...)
 	- tiff <unfixed>
 	- tiff3 <removed>
-	TODO: check
+	NOTE: https://blogs.gentoo.org/ago/2017/04/01/libtiff-multiple-ubsan-crashes
 CVE-2017-7595 (The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows ...)
 	- tiff <unfixed> (bug #860003)
 	- tiff3 <removed>