[Secure-testing-commits] r51522 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-05-11 04:20:25 +0000 (Thu, 11 May 2017)
New Revision: 51522

Modified:
   data/CVE/list
Log:
Add upstream bug references for CVE-2016-10371/tiff

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-05-11 04:20:16 UTC (rev 51521)
+++ data/CVE/list	2017-05-11 04:20:25 UTC (rev 51522)
@@ -82,6 +82,9 @@
 	NOT-FOR-US: Veritas NetBackup
 CVE-2016-10371 (The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in ...)
 	- tiff <unfixed>
+	- tiff3 <removed>
+	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2535
+	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2612
 CVE-2017-1000044 [Incorrect boundaries check when updating framebuffer]
 	- gtk-vnc 0.4.3-1
 	NOTE: Fixed by: https://git.gnome.org/browse/gtk-vnc/commit/?id=f3fc5e57a78d4be9872f1394f697b9929873a737 (release-0.4.3)