[Secure-testing-commits] r55413 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Sun Sep 3 13:16:28 UTC 2017


Author: carnil
Date: 2017-09-03 13:16:28 +0000 (Sun, 03 Sep 2017)
New Revision: 55413

Modified:
   data/CVE/list
Log:
Add bug reference for CVE-2017-14040

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-03 13:14:09 UTC (rev 55412)
+++ data/CVE/list	2017-09-03 13:16:28 UTC (rev 55413)
@@ -1059,7 +1059,7 @@
 	NOTE: Reproducer: https://blogs.gentoo.org/ago/2017/08/28/openjpeg-stack-based-buffer-overflow-write-in-pgxtoimage-convert-c/
 	NOTE: https://github.com/uclouvain/openjpeg/issues/997
 CVE-2017-14040 (An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG ...)
-	- openjpeg2 <unfixed>
+	- openjpeg2 <unfixed> (bug #874117)
 	NOTE: Fixed by: https://github.com/uclouvain/openjpeg/commit/2cd30c2b06ce332dede81cccad8b334cde997281
 	NOTE: Reproducer: https://blogs.gentoo.org/ago/2017/08/28/openjpeg-invalid-memory-write-in-tgatoimage-convert-c/
 	NOTE: https://github.com/uclouvain/openjpeg/issues/995




More information about the Secure-testing-commits mailing list