[Secure-testing-commits] r58914 - data/CVE

[László Böszörményi]

Author: gcs
Date: 2017-12-25 18:41:45 +0000 (Mon, 25 Dec 2017)
New Revision: 58914

Modified:
   data/CVE/list
Log:
Add CVE-2017-1778[23]/graphicsmagick fixed version in unstable


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-12-25 16:36:03 UTC (rev 58913)
+++ data/CVE/list	2017-12-25 18:41:45 UTC (rev 58914)
@@ -438,13 +438,13 @@
 	NOTE: https://github.com/ruby/ruby/pull/1777
 	NOTE: Fixed by: https://github.com/ruby/ruby/commit/e7464561b5151501beb356fc750d5dd1a88014f7
 CVE-2017-17783 (In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage ...)
-	- graphicsmagick <unfixed> (bug #884904)
+	- graphicsmagick 1.3.27-2 (bug #884904)
 	[stretch] - graphicsmagick <no-dsa> (Minor issue, built with QuantumDepth=16)
 	[jessie] - graphicsmagick <no-dsa> (Minor issue)
 	NOTE: http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset;node=60932931559a
 	NOTE: https://sourceforge.net/p/graphicsmagick/bugs/529/
 CVE-2017-17782 (In GraphicsMagick 1.3.27a, there is a heap-based buffer over-read in ...)
-	- graphicsmagick <unfixed> (bug #884905)
+	- graphicsmagick 1.3.27-2 (bug #884905)
 	NOTE: http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset;node=8e3d2264109c
 	NOTE: https://sourceforge.net/p/graphicsmagick/bugs/530/
 CVE-2017-17781 (In Horde Groupware through 5.2.22, SQL Injection exists via the group ...)