[Secure-testing-commits] r52288 - data

[Guido Guenther]

Author: agx
Date: 2017-06-04 15:24:02 +0000 (Sun, 04 Jun 2017)
New Revision: 52288

Modified:
   data/dla-needed.txt
Log:
lts: triage tiff

piggy backing on carnil's analysis

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2017-06-04 15:24:00 UTC (rev 52287)
+++ data/dla-needed.txt	2017-06-04 15:24:02 UTC (rev 52288)
@@ -110,6 +110,14 @@
 swftools (Thorsten Alteholz)
   NOTE: 20170528, one upstream fix is not yet complete
 --
+tiff
+  NOTE: two leaks (CVE-2017-9403, CVE-2017-9404). Might be worth waiting until
+  NOTE: more issues piled up
+--
+tiff3
+  NOTE: two leaks (CVE-2017-9403, CVE-2017-9404). Might be worth waiting until
+  NOTE: more issues piled up
+--
 trafficserver
   NOTE: maintainer contacted 2017-04-26
   NOTE: reproducer doesn't crash server in a test VM - <not-affected>? --anarcat