[Secure-testing-commits] r48454 - data/CVE

Fri Jan 27 18:54:04 UTC 2017

Author: agx
Date: 2017-01-27 18:54:04 +0000 (Fri, 27 Jan 2017)
New Revision: 48454

Modified:
   data/CVE/list
Log:
lts: CVE-2017-5509 does not affect wheezy

since it correcty uses next_image in the calculation

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2017-01-27 18:02:51 UTC (rev 48453)
+++ data/CVE/list	2017-01-27 18:54:04 UTC (rev 48454)
@@ -874,6 +874,7 @@
 CVE-2017-5509 [out of bound in psd file handling]
 	RESERVED
 	- imagemagick 8:6.9.7.4+dfsg-1 (bug #851377)
+	[wheezy] - imagemagick <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/ImageMagick/ImageMagick/issues/350
 	NOTE: http://www.openwall.com/lists/oss-security/2017/01/16/6
 CVE-2017-5510 [memory corruption heap overflow, psb file related, another one]


