[Secure-testing-commits] r48143 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Jan 18 06:55:57 UTC 2017


Author: carnil
Date: 2017-01-18 06:55:56 +0000 (Wed, 18 Jan 2017)
New Revision: 48143

Modified:
   data/CVE/list
Log:
Two CVEs rejeected

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-18 06:55:41 UTC (rev 48142)
+++ data/CVE/list	2017-01-18 06:55:56 UTC (rev 48143)
@@ -15367,16 +15367,10 @@
 	- jasper <removed>
 	NOTE: https://github.com/mdadams/jasper/issues/30
 	NOTE: https://github.com/mdadams/jasper/commit/69a1439a5381e42b06ec6a06ed2675eb793babee (version-1.900.8)
-CVE-2016-8881 [Heap overflow in jpc_getuint16()]
+CVE-2016-8881
 	REJECTED
-	- jasper 1.900.1-13
-	NOTE: https://github.com/mdadams/jasper/issues/29
-	NOTE: Duplicate of CVE-2011-4517, cf https://github.com/mdadams/jasper/issues/29#issuecomment-267322934
-CVE-2016-8880 [Heap overflow in jpc_dec_cp_setfromcox()]
+CVE-2016-8880
 	REJECTED
-	- jasper 1.900.1-13
-	NOTE: https://github.com/mdadams/jasper/issues/28
-	NOTE: Duplicate of CVE-2011-4516, cf https://github.com/mdadams/jasper/issues/28#issuecomment-267053875
 CVE-2016-8866 [memory allocation failure in AcquireMagickMemory (memory.c) (incomplete fix for CVE-2016-8862)]
 	RESERVED
 	{DLA-756-1}




More information about the Secure-testing-commits mailing list