[Secure-testing-commits] r54053 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2017-07-29 13:58:05 +0000 (Sat, 29 Jul 2017)
New Revision: 54053

Modified:
   data/CVE/list
Log:
lame CVE-2017-9410, CVE-2017-9411, CVE-2017-9412 reported to upstream

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-29 12:12:22 UTC (rev 54052)
+++ data/CVE/list	2017-07-29 13:58:05 UTC (rev 54053)
@@ -6227,12 +6227,15 @@
 CVE-2017-9412 (The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 ...)
 	- lame <unfixed>
 	NOTE: http://seclists.org/fulldisclosure/2017/Jul/63
+	NOTE: https://sourceforge.net/p/lame/bugs/463/
 CVE-2017-9411 (The fill_buffer_resample function in libmp3lame/util.c in LAME 3.99.5 ...)
 	- lame <unfixed>
 	NOTE: http://seclists.org/fulldisclosure/2017/Jul/63
+	NOTE: https://sourceforge.net/p/lame/bugs/462/
 CVE-2017-9410 (The fill_buffer_resample function in libmp3lame/util.c in LAME 3.99.5 ...)
 	- lame <unfixed>
 	NOTE: http://seclists.org/fulldisclosure/2017/Jul/63
+	NOTE: https://sourceforge.net/p/lame/bugs/461/
 CVE-2017-9409 (In ImageMagick 7.0.5-5, the ReadMPCImage function in mpc.c allows ...)
 	{DLA-1000-1}
 	- imagemagick 8:6.9.7.4+dfsg-11 (low; bug #864090)