[Secure-testing-commits] r56293 - data/CVE

Sat Sep 30 19:53:54 UTC 2017

Author: carnil
Date: 2017-09-30 19:53:54 +0000 (Sat, 30 Sep 2017)
New Revision: 56293

Modified:
   data/CVE/list
Log:
Add bug reference for CVE-2017-12596

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-09-30 19:08:54 UTC (rev 56292)
+++ data/CVE/list	2017-09-30 19:53:54 UTC (rev 56293)
@@ -6674,7 +6674,7 @@
 	- opencv <unfixed> (bug #872044)
 	NOTE: https://github.com/opencv/opencv/issues/9309
 CVE-2017-12596 (In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read ...)
-	- openexr <unfixed>
+	- openexr <unfixed> (bug #877352)
 	NOTE: https://github.com/openexr/openexr/issues/238
 CVE-2017-12595 (The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and ...)
 	- qpdf 7.0.0-1


