[Secure-testing-commits] r58806 - data/CVE

Thu Dec 21 16:59:33 UTC 2017

Author: gcs
Date: 2017-12-21 16:59:33 +0000 (Thu, 21 Dec 2017)
New Revision: 58806

Modified:
   data/CVE/list
Log:
Add CVE-2017-9935/tiff fixed version in unstable


Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-12-21 16:41:15 UTC (rev 58805)
+++ data/CVE/list	2017-12-21 16:59:33 UTC (rev 58806)
@@ -28595,7 +28595,7 @@
 	NOTE: Fixed by: https://github.com/vadz/libtiff/commit/fe8d7165956b88df4837034a9161dc5fd20cf67a
 CVE-2017-9935 (In LibTIFF 4.0.8, there is a heap-based buffer overflow in the ...)
 	{DLA-1206-1}
-	- tiff <unfixed> (bug #866109)
+	- tiff 4.0.9-2 (bug #866109)
 	- tiff3 <removed>
 	[wheezy] - tiff3 <not-affected> (does not build vulnerable tiff2pdf)
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2704


