Author: carnil
Date: 2016-10-31 14:58:59 +0000 (Mon, 31 Oct 2016)
New Revision: 45801
Modified:
data/CVE/list
Log:
Add CVE-2016-9085/libwebp bug, #842714
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-10-31 14:45:55 UTC (rev 45800)
+++ data/CVE/list 2016-10-31 14:58:59 UTC (rev 45801)
@@ -173,9 +173,9 @@
RESERVED
CVE-2016-9031
RESERVED
-CVE-2016-9085
+CVE-2016-9085 [Several integer overflows]
RESERVED
- - libwebp <unfixed>
+ - libwebp <unfixed> (bug #842714)
NOTE:
https://chromium.googlesource.com/webm/libwebp/+/e2affacc35f1df6cc3b1a9fa0ceff5ce2d0cce83
NOTE: Report: https://bugs.chromium.org/p/webp/issues/detail?id=314
(private)
NOTE: For libwebp only in examples, but other projects seem to use the
gifdec.c
_______________________________________________
Secure-testing-commits mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
