[Secure-testing-commits] r51963 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-05-25 18:20:19 +0000 (Thu, 25 May 2017)
New Revision: 51963

Modified:
   data/CVE/list
Log:
Add qpdf upstream issue references

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-05-25 15:56:29 UTC (rev 51962)
+++ data/CVE/list	2017-05-25 18:20:19 UTC (rev 51963)
@@ -178,16 +178,19 @@
 	[jessie] - qpdf <no-dsa> (Minor issue)
 	[wheezy] - qpdf <no-dsa> (Minor issue)
 	NOTE: http://www.openwall.com/lists/oss-security/2017/05/23/10
+	NOTE: https://github.com/qpdf/qpdf/issues/101
 CVE-2017-9209 (libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of ...)
 	- qpdf <unfixed>
 	[jessie] - qpdf <no-dsa> (Minor issue)
 	[wheezy] - qpdf <no-dsa> (Minor issue)
 	NOTE: http://www.openwall.com/lists/oss-security/2017/05/23/10
+	NOTE: https://github.com/qpdf/qpdf/issues/100
 CVE-2017-9208 (libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of ...)
 	- qpdf <unfixed>
 	[jessie] - qpdf <no-dsa> (Minor issue)
 	[wheezy] - qpdf <no-dsa> (Minor issue)
 	NOTE: http://www.openwall.com/lists/oss-security/2017/05/23/10
+	NOTE: https://github.com/qpdf/qpdf/issues/99
 CVE-2017-9207 (The iw_get_ui16be function in imagew-util.c:422:24 in ...)
 	NOT-FOR-US: ImageWorsener
 CVE-2017-9206 (The iw_get_ui16le function in imagew-util.c:405:23 in ...)