[Secure-testing-commits] r54871 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-08-19 08:44:24 +0000 (Sat, 19 Aug 2017)
New Revision: 54871

Modified:
   data/CVE/list
Log:
Add CVE-2017-12644/imagemagick

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-08-19 08:41:01 UTC (rev 54870)
+++ data/CVE/list	2017-08-19 08:44:24 UTC (rev 54871)
@@ -1303,9 +1303,10 @@
 CVE-2017-12645 (XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid ...)
 	NOT-FOR-US: Liferay Portal
 CVE-2017-12644 (ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in ...)
-	- imagemagick <unfixed>
+	- imagemagick <unfixed> (unimportant)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/551
-	NOTE: https://github.com/ImageMagick/ImageMagick/commit/9f375e7080a2c1044cd546854d0548b4bfb429d0
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/a33f7498f9052b50e8fe8c8422a11ba84474cb42
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/9f375e7080a2c1044cd546854d0548b4bfb429d0
 CVE-2017-12642 (ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in ...)
 	- imagemagick 8:6.9.7.4+dfsg-13 (bug #869796)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/552