[Secure-testing-commits] r55420 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-09-03 14:23:18 +0000 (Sun, 03 Sep 2017)
New Revision: 55420

Modified:
   data/CVE/list
Log:
Add bug reference for CVE-2017-14039

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-03 13:39:58 UTC (rev 55419)
+++ data/CVE/list	2017-09-03 14:23:18 UTC (rev 55420)
@@ -1065,7 +1065,7 @@
 	NOTE: Reproducer: https://blogs.gentoo.org/ago/2017/08/28/openjpeg-invalid-memory-write-in-tgatoimage-convert-c/
 	NOTE: https://github.com/uclouvain/openjpeg/issues/995
 CVE-2017-14039 (A heap-based buffer overflow was discovered in the opj_t2_encode_packet ...)
-	- openjpeg2 <unfixed>
+	- openjpeg2 <unfixed> (bug #874118)
 	NOTE: Fixed by: https://github.com/uclouvain/openjpeg/commit/c535531f03369623b9b833ef41952c62257b507e
 	NOTE: Reproducer: https://blogs.gentoo.org/ago/2017/08/28/openjpeg-heap-based-buffer-overflow-in-opj_t2_encode_packet-t2-c/
 	NOTE: https://github.com/uclouvain/openjpeg/issues/992