[Secure-testing-commits] r46399 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-11-21 20:28:10 +0000 (Mon, 21 Nov 2016)
New Revision: 46399

Modified:
   data/CVE/list
Log:
Add entry for #845246

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-11-21 20:28:00 UTC (rev 46398)
+++ data/CVE/list	2016-11-21 20:28:10 UTC (rev 46399)
@@ -8,6 +8,13 @@
 	NOTE: Since 7.0.72-3, src:tomcat7 only builds the Servlet API
 	- tomcat6 6.0.41-3
 	NOTE: Since 6.0.41-3, src:tomcat6 only builds a servlet and docs in Jessie
+CVE-2016-XXXX [mat file out of bound]
+	- imagemagick <unfixed> (bug #845246)
+	NOTE: https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1545366
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/131
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/b173a352397877775c51c9a0e9d59eb6ce24c455
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/f3b483e8b054c50149912523b4773687e18afe25
+	TODO: check
 CVE-2016-XXXX [Add check for invalid mat file]
 	- imagemagick <unfixed> (bug #845244)
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/8a370f9ab120faf182aa160900ba692ba8e2bcf0