[Secure-testing-commits] r26358 - data/CVE

Sun Mar 30 19:43:30 UTC 2014

Author: carnil
Date: 2014-03-30 19:43:30 +0000 (Sun, 30 Mar 2014)
New Revision: 26358

Modified:
   data/CVE/list
Log:
Update entry for CVE-2014-1958/imagemagick (for squeeze)

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2014-03-30 19:00:36 UTC (rev 26357)
+++ data/CVE/list	2014-03-30 19:43:30 UTC (rev 26358)
@@ -1768,6 +1768,9 @@
 CVE-2014-1958 [PSD Images Processing RLE Decoding Buffer Overflow Vulnerability]
 	RESERVED
 	- imagemagick 8:6.7.7.10+dfsg-1 (bug #740250)
+	[squeeze] - imagemaick <not-affected> (DecodePSDPixels function is not present)
+	NOTE: squeeze; DecodePSDPixels not present but there was a rewrite from DecodeImage?
+	TODO: still double check squeeze
 	NOTE: http://secunia.com/advisories/56844/
 	NOTE: http://trac.imagemagick.org/changeset/14801
 CVE-2014-XXXX [phpbb3: denial of service vulnerability]


