[Secure-testing-commits] r58566 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-12-14 09:17:20 +0000 (Thu, 14 Dec 2017)
New Revision: 58566

Modified:
   data/CVE/list
Log:
Add CVE-2017-17681/imagemagick

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-12-14 09:13:27 UTC (rev 58565)
+++ data/CVE/list	2017-12-14 09:17:20 UTC (rev 58566)
@@ -2006,7 +2006,12 @@
 	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/da649f031e36753c69268c5c027e695b8ae45e9a
 	NOTE: https://github.com/ImageMagick/ImageMagick/commit/06c8dd4de59e48d282d4f224faa64ab9012a711a
 CVE-2017-17681 (In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found ...)
-	TODO: check
+	- imagemagick <unfixed>
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/869
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/f6ca1441a5260165dabc627d26f60c32af1d5678
+	NOTE: different fix: https://github.com/ImageMagick/ImageMagick/commit/73d59a74e0b0a864c1a9581b8a4bdbee427125e2
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/edf1b9408492b97cd08111a0a9cb123f6391dc5b
+	NOTE: different fix for IM-6: https://github.com/ImageMagick/ImageMagick/commit/cae42160e5ab6de4b2a9433267e143ce295ae957
 CVE-2017-17680 (In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in ...)
 	TODO: check
 CVE-2017-17679