[Secure-testing-commits] r58973 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-12-27 22:07:12 +0000 (Wed, 27 Dec 2017)
New Revision: 58973

Modified:
   data/CVE/list
Log:
Add CVE-2017-17914/imagemagick

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-12-27 22:05:19 UTC (rev 58972)
+++ data/CVE/list	2017-12-27 22:07:12 UTC (rev 58973)
@@ -69,7 +69,10 @@
 	NOTE: http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/1721f1b7e67a
 	NOTE: https://sourceforge.net/p/graphicsmagick/bugs/535/
 CVE-2017-17914 (In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ...)
-	TODO: check
+	- imagemagick <unfixed>
+	NOTE: https://github.com/ImageMagick/ImageMagick/issues/908
+	NOTE: https://github.com/ImageMagick/ImageMagick/commit/650ec57d84b7b1dce66435b8cd3b58f7ae66db1b
+	NOTE: ImageMagick-6: https://github.com/ImageMagick/ImageMagick/commit/42781eeebadf111a2e01559735ea504a78192046
 CVE-2017-17913 (In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based ...)
 	TODO: check
 CVE-2017-17912 (In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based ...)