[Secure-testing-commits] r55404 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-09-03 09:39:19 +0000 (Sun, 03 Sep 2017)
New Revision: 55404

Modified:
   data/CVE/list
Log:
Add reference for pngcrush upstream commit including the fix for CVE-2015-7700

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-03 09:10:17 UTC (rev 55403)
+++ data/CVE/list	2017-09-03 09:39:19 UTC (rev 55404)
@@ -73521,6 +73521,7 @@
 	NOTE: https://github.com/ntp-project/ntp/commit/79604d925e4477247eee202155215e7865293809
 CVE-2015-7700 (Double-free vulnerability in the sPLT chunk structure and png.c in ...)
 	- pngcrush <unfixed>
+	NOTE: http://sourceforge.net/p/pmt/code/ci/e8ae5a842e86324f0bee91f4d98245fddb8ea5dd (1.7.87)
 CVE-2015-7697 (Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of ...)
 	{DSA-3386-1 DLA-330-1}
 	- unzip 6.0-19 (bug #802160)