[Secure-testing-commits] r48320 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Jan 24 06:30:34 UTC 2017


Author: carnil
Date: 2017-01-24 06:30:33 +0000 (Tue, 24 Jan 2017)
New Revision: 48320

Modified:
   data/CVE/list
Log:
CVE-2016-9601/jbig2dec fixed in unstable

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-01-24 06:01:55 UTC (rev 48319)
+++ data/CVE/list	2017-01-24 06:30:33 UTC (rev 48320)
@@ -12742,7 +12742,7 @@
 	TODO: check, proposed patch is not yet complete
 CVE-2016-9601 [Heap-buffer overflow due to Integer overflow in jbig2_image_new function]
 	RESERVED
-	- jbig2dec <unfixed> (bug #850497)
+	- jbig2dec 0.13-4 (bug #850497)
 	NOTE: https://bugs.ghostscript.com/show_bug.cgi?id=697457
 	NOTE: Patch: http://git.ghostscript.com/?p=jbig2dec.git;a=commitdiff;h=e698d5c11d27212aa1098bc5b1673a3378563092
 CVE-2016-9600 [Null Pointer Dereference due to missing check for UNKNOWN color space in JP2 encoder]




More information about the Secure-testing-commits mailing list