[Secure-testing-commits] r48174 - data/CVE

Antoine Beaupré anarcat at moszumanska.debian.org
Wed Jan 18 21:36:54 UTC 2017


Author: anarcat
Date: 2017-01-18 21:36:53 +0000 (Wed, 18 Jan 2017)
New Revision: 48174

Modified:
   data/CVE/list
Log:
add patch for tiff bug #846837



Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-18 21:33:59 UTC (rev 48173)
+++ data/CVE/list	2017-01-18 21:36:53 UTC (rev 48174)
@@ -6681,6 +6681,7 @@
 CVE-2016-XXXX [heap-based buffer overflow in TIFFFillStrip (tif_read.c)]
 	- tiff 4.0.7-2 (bug #846837)
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2608
+	NOTE: https://github.com/vadz/libtiff/commit/9a72a69e035ee70ff5c41541c8c61cd97990d018
 CVE-2016-XXXX [tiffcrop: divide-by-zero in readSeparateStripsIntoBuffer when BitsPerSample is missing]
 	- tiff 4.0.7-2 (unimportant; bug #846838)
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2619




More information about the Secure-testing-commits mailing list