[Secure-testing-commits] r55616 - data/CVE

Sat Sep 9 23:07:56 UTC 2017

Author: roberto
Date: 2017-09-09 23:07:55 +0000 (Sat, 09 Sep 2017)
New Revision: 55616

Modified:
   data/CVE/list
Log:
Note that CVE-2017-12944 does not affect tiff3 in wheezy

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-09-09 22:51:07 UTC (rev 55615)
+++ data/CVE/list	2017-09-09 23:07:55 UTC (rev 55616)
@@ -3216,6 +3216,7 @@
 CVE-2017-12944 (The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 ...)
 	- tiff <unfixed> (bug #872607)
 	- tiff3 <removed>
+	[wheezy] - tiff3 <not-affected> (Vulnerable code not present)
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2725
 	NOTE: Fixed by: https://github.com/vadz/libtiff/commit/dc02f9050311a90b3c0655147cee09bfa7081cfc
 CVE-2017-12943 (D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers ...)


