[Git][security-tracker-team/security-tracker][master] CVE-2018-16335,tiff: postponed for Jessie

[Markus Koschany]

Markus Koschany pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f60f5c51 by Markus Koschany at 2018-09-02T19:26:45Z
CVE-2018-16335,tiff: postponed for Jessie

Can be fixed in a future DLA when upstream clarifies impact and solution.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -5,6 +5,7 @@ CVE-2018-16336 (Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows r
 CVE-2018-16335 (newoffsets handling in ChopUpSingleUncompressedStrip in tif_dirread.c ...)
 	- tiff <unfixed> (bug #907795)
 	[stretch] - tiff <postponed> (Can be fixed along in future DSA)
+	[jessie] - tiff <postponed> (Can be fixed along in future DLA)
 	- tiff3 <removed>
 	NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2809
 	NOTE: The fix for CVE-2017-11613 is possibly covering the bug.



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f60f5c5193d965afc14177db5ec665c4df2dfa60

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f60f5c5193d965afc14177db5ec665c4df2dfa60
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180902/9c709b4e/attachment.html>