kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

- Document that two older tiff vulnerabilities also affects

Browse source 
linux-tiff. [1]
- Add an extra reference to each of the two entries while I'm here
  anyway.
- In one of the tiff title elements do s/---/--/ for consistency.

Discussed with:	nectar [1]
Approved by:	portmgr (implicit, VuXML)
This commit is contained in:
Simon L. B. Nielsen 2005-01-08 00:20:23 +00:00
parent f7d666b587
commit 08f3a5badf
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=125749
1 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
security/vuxml/vuln.xml
View file

@ -3427,6 +3427,7 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
<affects>
<package>
<name>tiff</name>
<name>linux-tiff</name>
<range><le>3.6.1_2</le></range>
</package>
</affects>
@ -3439,11 +3440,13 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
</body>
</description>
<references>
<certvu>687568</certvu>
<cvename>CAN-2004-0886</cvename>
</references>
<dates>
<discovery>2004-10-13</discovery>
<entry>2004-10-13</entry>
<modified>2005-01-08</modified>
</dates>
</vuln>
@ -3504,10 +3507,11 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
</vuln>
<vuln vid="f6680c03-0bd8-11d9-8a8a-000c41e2cdad">
<topic>tiff --- RLE decoder heap overflows</topic>
<topic>tiff -- RLE decoder heap overflows</topic>
<affects>
<package>
<name>tiff</name>
<name>linux-tiff</name>
<range><le>3.6.1_1</le></range>
</package>
</affects>
@ -3520,12 +3524,14 @@ EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
</body>
</description>
<references>
<certvu>948752</certvu>
<cvename>CAN-2004-0803</cvename>
<url>http://scary.beasts.org/security/CESA-2004-006.txt</url>
</references>
<dates>
<discovery>2004-10-13</discovery>
<entry>2004-10-13</entry>
<modified>2005-01-08</modified>
</dates>
</vuln>