[Secure-testing-commits] r52535 - in data: . DLA

[Raphaël Hertzog]

Author: hertzog
Date: 2017-06-13 14:00:03 +0000 (Tue, 13 Jun 2017)
New Revision: 52535

Modified:
   data/DLA/list
   data/dla-needed.txt
Log:
Reserve DLA-983-1 and DLA-984-1 for tiff3 and tiff

Modified: data/DLA/list
===================================================================
--- data/DLA/list	2017-06-13 09:52:25 UTC (rev 52534)
+++ data/DLA/list	2017-06-13 14:00:03 UTC (rev 52535)
@@ -1,3 +1,9 @@
+[13 Jun 2017] DLA-984-1 tiff - security update
+	{CVE-2016-10095 CVE-2017-9147 CVE-2017-9403 CVE-2017-9404}
+	[wheezy] - tiff 4.0.2-6+deb7u14
+[13 Jun 2017] DLA-983-1 tiff3 - security update
+	{CVE-2016-10095 CVE-2017-9147 CVE-2017-9403 CVE-2017-9404}
+	[wheezy] - tiff3 3.9.6-11+deb7u6
 [10 Jun 2017] DLA-982-1 tor - security update
 	{CVE-2017-0376}
 	[wheezy] - tor 0.2.4.29-1

Modified: data/dla-needed.txt
===================================================================
--- data/dla-needed.txt	2017-06-13 09:52:25 UTC (rev 52534)
+++ data/dla-needed.txt	2017-06-13 14:00:03 UTC (rev 52535)
@@ -123,14 +123,6 @@
 swftools (Thorsten Alteholz)
   NOTE: 20170528, one upstream fix is not yet complete
 --
-tiff (Raphaël Hertzog)
-  NOTE: two leaks (CVE-2017-9403, CVE-2017-9404). Might be worth waiting until
-  NOTE: more issues piled up
---
-tiff3 (Raphaël Hertzog)
-  NOTE: two leaks (CVE-2017-9403, CVE-2017-9404). Might be worth waiting until
-  NOTE: more issues piled up
---
 tomcat7 (Markus Koschany)
 --
 trafficserver