[Secure-testing-commits] r51818 - data/CVE

[Raphaël Hertzog]

Author: hertzog
Date: 2017-05-22 10:19:02 +0000 (Mon, 22 May 2017)
New Revision: 51818

Modified:
   data/CVE/list
Log:
CVE-2017-9117 does not affect tiff3

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-05-22 09:10:12 UTC (rev 51817)
+++ data/CVE/list	2017-05-22 10:19:02 UTC (rev 51818)
@@ -49,7 +49,7 @@
 	RESERVED
 CVE-2017-9117 (In LibTIFF 4.0.7, the program processes BMP images without verifying ...)
 	- tiff <unfixed> (unimportant)
-	- tiff3 <removed>
+	- tiff3 <not-affected> (Does not ship libtiff-tools)
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2690
 	NOTE: bmp2tiff utility removed in 4.0.6-3 and 4.0.3-12.3+deb8u2
 CVE-2017-9116 (In OpenEXR 2.2.0, an invalid read of size 1 in the uncompress function ...)