[Secure-testing-commits] r58460 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-12-11 09:34:26 +0000 (Mon, 11 Dec 2017)
New Revision: 58460

Modified:
   data/CVE/list
Log:
Add CVE-2017-17498/graphicsmagick

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-12-11 09:33:23 UTC (rev 58459)
+++ data/CVE/list	2017-12-11 09:34:26 UTC (rev 58460)
@@ -115,7 +115,9 @@
 	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/dd96d671e4d5ae22c6894c302e8996c13f24c45a
 	NOTE: https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=33078&sid=5fbb164c3830293138917f9b14264ed1
 CVE-2017-17498 (WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote ...)
-	TODO: check
+	- graphicsmagick 1.3.27-1
+	NOTE: http://hg.code.sf.net/p/graphicsmagick/code/rev/f1c418ef0260
+	NOTE: https://sourceforge.net/p/graphicsmagick/bugs/525/
 CVE-2017-17497 (In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows ...)
 	TODO: check
 CVE-2017-17496 (The socket_create function in socket.c in idevicerestore through ...)