[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] tiff DSA

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f6b5860b by Moritz Muehlenhoff at 2018-01-27T17:37:42+01:00
tiff DSA

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -41080,6 +41080,7 @@ CVE-2017-8856 (In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 
 CVE-2016-10371 (The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in ...)
 	{DLA-969-1}
 	- tiff 4.0.7-7 (low; bug #862929)
+	[jessie] - tiff 4.0.3-12.3+deb8u5
 	- tiff3 <removed>
 	[wheezy] - tiff3 <no-dsa> (tiff tools are not built, can be fixed later)
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2535


=====================================
data/DSA/list
=====================================
--- a/data/DSA/list
+++ b/data/DSA/list
@@ -1,3 +1,7 @@
+[27 Jan 2018] DSA-4100-1 tiff - security update
+	{CVE-2017-9935 CVE-2017-11335 CVE-2017-12944 CVE-2017-13726 CVE-2017-13727 CVE-2017-18013}
+	[jessie] - tiff 4.0.3-12.3+deb8u5
+	[stretch] - tiff 4.0.8-2+deb9u2
 [27 Jan 2018] DSA-4099-1 ffmpeg - security update
 	{CVE-2017-17081}
 	[stretch] - ffmpeg 7:3.2.10-1~deb9u1


=====================================
data/dsa-needed.txt
=====================================
--- a/data/dsa-needed.txt
+++ b/data/dsa-needed.txt
@@ -70,9 +70,6 @@ sssd/stable
 --
 thunderbird
 --
-tiff (jmm)
-  gcs proposed debdiffs for jessie and stretch: need review+ack
---
 tomcat7/oldstable
 --
 tomcat8



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f6b5860bdc38c1bb12cc51df309ad52534b0caf0

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f6b5860bdc38c1bb12cc51df309ad52534b0caf0
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180127/7f19208b/attachment.html>