Author: roberto
Date: 2017-09-09 23:07:55 +0000 (Sat, 09 Sep 2017)
New Revision: 55616
Modified:
data/CVE/list
Log:
Note that CVE-2017-12944 does not affect tiff3 in wheezy
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-09-09 22:51:07 UTC (rev 55615)
+++ data/CVE/list 2017-09-09 23:07:55 UTC (rev 55616)
@@ -3216,6 +3216,7 @@
CVE-2017-12944 (The TIFFReadDirEntryArray function in tif_read.c in LibTIFF
4.0.8 ...)
- tiff <unfixed> (bug #872607)
- tiff3 <removed>
+ [wheezy] - tiff3 <not-affected> (Vulnerable code not present)
NOTE: http://bugzilla.maptools.org/show_bug.cgi?id=2725
NOTE: Fixed by:
https://github.com/vadz/libtiff/commit/dc02f9050311a90b3c0655147cee09bfa7081cfc
CVE-2017-12943 (D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote
attackers ...)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
