[Secure-testing-commits] r58694 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-12-19 16:28:06 +0000 (Tue, 19 Dec 2017)
New Revision: 58694

Modified:
   data/CVE/list
Log:
new gimp issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-12-19 15:37:51 UTC (rev 58693)
+++ data/CVE/list	2017-12-19 16:28:06 UTC (rev 58694)
@@ -1,3 +1,25 @@
+CVE-2017-XXXX [gimp: Heap overflow in FLI import]
+	- gimp <unfixed>
+	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=739133
+CVE-2017-XXXX [gimp: OOB read in TGA]
+	- gimp <unfixed> (unimportant)
+	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=739134
+	NOTE: Crash in desktop tool, no/negligable security impact
+CVE-2017-XXXX [gimp: OOB read in XCF]
+	- gimp <unfixed> (unimportant)
+	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=790783
+	NOTE: Crash in desktop tool, no/negligable security impact
+CVE-2017-XXXX [gimp: OOB read in GBR]
+	- gimp <unfixed> (unimportant)
+	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=790784
+	NOTE: Crash in desktop tool, no/negligable security impact
+CVE-2017-XXXX [gimp: Heap overflow in PSP]
+	- gimp <unfixed>
+	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=790849
+CVE-2017-XXXX [gimp: OOB read in PSP]
+	- gimp <unfixed> (unimportant)
+	NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=790853
+	NOTE: Crash in desktop tool, no/negligable security impact
 CVE-2017-17760
 	RESERVED
 CVE-2017-17759 (Conarc iChannel allows remote attackers to obtain sensitive ...)