[Secure-testing-commits] r37943 - data/CVE

[Raphaël Hertzog]

Author: hertzog
Date: 2015-11-27 11:32:16 +0000 (Fri, 27 Nov 2015)
New Revision: 37943

Modified:
   data/CVE/list
Log:
Confirmed the third issue with ImageMagick (Double free in coders/pict.c:2000)

It can be reproduced on all Debian releases.

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-11-27 11:32:05 UTC (rev 37942)
+++ data/CVE/list	2015-11-27 11:32:16 UTC (rev 37943)
@@ -1787,7 +1787,6 @@
 	NOTE: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1448803
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/0f6fc2d5bf8f500820c3dbcf0d23ee14f2d9f734
 	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2015/10/07/2
-	TODO: check
 CVE-2015-XXXX [Double free in coders/tga.c:221]
 	- imagemagick <unfixed>
 	[jessie] - imagemagick <not-affected> (Can't reproduce crash with file)