[Secure-testing-commits] r50649 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-04-14 09:41:31 +0000 (Fri, 14 Apr 2017)
New Revision: 50649

Modified:
   data/CVE/list
Log:
Add CVE-2016-10328/freetype

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-04-14 09:34:14 UTC (rev 50648)
+++ data/CVE/list	2017-04-14 09:41:31 UTC (rev 50649)
@@ -34,7 +34,11 @@
 CVE-2017-7856 (LibreOffice before 2017-03-11 has an out-of-bounds write caused by a ...)
 	TODO: check
 CVE-2016-10328 (FreeType 2 before 2016-12-16 has an out-of-bounds write caused by a ...)
-	TODO: check
+	[experimental] - freetype 2.7.1-0.1
+	- freetype <unfixed>
+	NOTE: http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=beecf80a6deecbaf5d264d4f864451bde4fe98b8
+	NOTE: http://savannah.nongnu.org/bugs/?func=detailitem&item_id=49858
+	NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=289
 CVE-2016-10327 (LibreOffice before 2016-12-22 has an out-of-bounds write caused by a ...)
 	TODO: check
 CVE-2017-7855