[Secure-testing-commits] r53137 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-07-03 09:13:38 +0000 (Mon, 03 Jul 2017)
New Revision: 53137

Modified:
   data/CVE/list
Log:
Add three new graphicsmagick issues

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-07-03 09:10:19 UTC (rev 53136)
+++ data/CVE/list	2017-07-03 09:13:38 UTC (rev 53137)
@@ -1,9 +1,11 @@
 CVE-2017-10801
 	RESERVED
 CVE-2017-10800 (When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it ...)
-	TODO: check
+	- graphicsmagick <unfixed>
+	NOTE: http://hg.code.sf.net/p/graphicsmagick/code/rev/e5761e3a2012
 CVE-2017-10799 (When GraphicsMagick 1.3.25 processes a DPX image (with metadata ...)
-	TODO: check
+	- graphicsmagick <unfixed>
+	NOTE: http://hg.code.sf.net/p/graphicsmagick/code/rev/f10b9bb3ca62
 CVE-2017-10798 (In ObjectPlanet Opinio before 7.6.4, there is XSS. ...)
 	TODO: check
 CVE-2017-10797
@@ -13,7 +15,8 @@
 CVE-2017-10795 (Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows ...)
 	TODO: check
 CVE-2017-10794 (When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata ...)
-	TODO: check
+	- graphicsmagick <unfixed>
+	NOTE: https://sourceforge.net/p/graphicsmagick/code/ci/a20bee0a0ad216aa11a2be3de63b60ca6bef4106/
 CVE-2017-10793
 	RESERVED
 CVE-2017-10792 (There is a NULL Pointer Dereference in the function ll_insert() of the ...)