[Secure-testing-commits] r54635 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-08-11 19:09:27 +0000 (Fri, 11 Aug 2017)
New Revision: 54635

Modified:
   data/CVE/list
Log:
two additional openjpeg upstream fixes


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-08-11 19:07:40 UTC (rev 54634)
+++ data/CVE/list	2017-08-11 19:09:27 UTC (rev 54635)
@@ -36943,6 +36943,7 @@
 CVE-2016-9118 (Heap Buffer Overflow (WRITE of size 4) in function pnmtoimage of ...)
 	- openjpeg2 <unfixed> (bug #844557)
 	NOTE: https://github.com/uclouvain/openjpeg/issues/861
+	NOTE: https://github.com/uclouvain/openjpeg/commit/c22cbd8bdf8ff2ae372f94391a4be2d322b36b41
 CVE-2016-9117 (NULL Pointer Access in function imagetopnm of convert.c(jp2):1289 in ...)
 	- openjpeg2 <unfixed> (unimportant; bug #844556)
 	NOTE: https://github.com/uclouvain/openjpeg/issues/860
@@ -36967,6 +36968,7 @@
 	- openjpeg2 <unfixed> (bug #844551)
 	[stretch] - openjpeg2 <no-dsa> (Minor issue)
 	[jessie] - openjpeg2 <no-dsa> (Minor issue)
+	NOTE: https://github.com/uclouvain/openjpeg/commit/d27ccf01c68a31ad62b33d2dc1ba2bb1eeaafe7b	
 	NOTE: https://github.com/uclouvain/openjpeg/issues/855
 CVE-2016-9111 (Incorrect access control mechanisms in Citrix Receiver Desktop Lock ...)
 	NOT-FOR-US: Citrix