[Secure-testing-commits] r47653 - data/CVE

László Böszörményi gcs at moszumanska.debian.org
Sun Jan 1 21:12:12 UTC 2017


Author: gcs
Date: 2017-01-01 21:12:12 +0000 (Sun, 01 Jan 2017)
New Revision: 47653

Modified:
   data/CVE/list
Log:
Add tiff fixed versions


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-01 21:10:12 UTC (rev 47652)
+++ data/CVE/list	2017-01-01 21:12:12 UTC (rev 47653)
@@ -102,15 +102,15 @@
 	- tiff <unfixed>
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2625
 CVE-2016-10094 [off-by-one error in tiff2pdf]
-	- tiff <unfixed>
+	- tiff 4.0.7-4
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2640
 	NOTE: Fixed by: https://github.com/vadz/libtiff/commit/c7153361a4041260719b340f73f2f76b0969235c
 CVE-2016-10093 [uint32 underflow/overflow that can cause heap-based buffer overflow in tiffcp]
-	- tiff <unfixed>
+	- tiff 4.0.7-2
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2610
 	NOTE: Fixed by: https://github.com/vadz/libtiff/commit/787c0ee906430b772f33ca50b97b8b5ca070faec
 CVE-2016-10092 [heap-buffer-overflow in tiffcrop]
-	- tiff <unfixed>
+	- tiff 4.0.7-2
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2620
 	NOTE: Fixed by: https://github.com/vadz/libtiff/commit/9657bbe3cdce4aaa90e07d50c1c70ae52da0ba6a
 CVE-2016-10091 [stack-based buffer overflows in cmd_* functions]




More information about the Secure-testing-commits mailing list