[Secure-testing-commits] r48664 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-02-02 12:56:33 +0000 (Thu, 02 Feb 2017)
New Revision: 48664

Modified:
   data/CVE/list
Log:
new iio-sensor-proxy and netpbm issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-02-02 11:03:45 UTC (rev 48663)
+++ data/CVE/list	2017-02-02 12:56:33 UTC (rev 48664)
@@ -1,3 +1,5 @@
+CVE-2016-XXXX [iio-sensor-proxy: insecure dbus policy]
+	- iio-sensor-proxy <unfixed> (bug #853951)
 CVE-2016-10192 [ffmpeg ffserver.c]
 	- ffmpeg 7:3.2.2-1
 	- libav <undetermined>
@@ -56,8 +58,8 @@
 CVE-2017-5852
 	NOT-FOR-US: podofo
 CVE-2017-5849 [Out-of-Bound read and write issues in put1bitbwtile() and putgreytile()]
+	- netpbm-free <unfixed>
 	NOTE: http://www.openwall.com/lists/oss-security/2017/02/02/2
-	TODO: check
 CVE-2017-5850
 	NOT-FOR-US: OpenBSD httpd
 CVE-2017-5833